PT-2026-117684

Name of the Vulnerable Software and Affected Versions Pillow versions 5.3.0 through 12.11.0 Description Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. This occurs because the decodeStrip and decodeTile buffers may...