PT-2026-120293

Summary Pillow's libImaging decodeTile decoder, used to decode tiled TIFF images, allocates a per-tile buffer using reallocstate-buffer, TIFFTileSizetiff. After each TIFFReadTile it then iterates tile y from 0 up to current tile length and calls the configured row unpacker here copy4 with the...