CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Summary A vulnerability in Apple’s image processing RawCamera.bundle affects iOS 18.6.1 and macOS. The issue occurs when DNG files contain mismatched TIFF metadata and JPEG Lossless parameters , leading to memory...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 & CVE-2026-21048 — Samsung libimagecodec.quram.so OOB Write PoC Overview This repository contains conceptual Proof-of-Concept PoC files that demonstrate out-of-bounds OOB write vulnerabilities in the Quramsoft image codec library libimagecodec.quram.so used on Samsung Android...

CVE-2026-128066

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

CVE-2026-128067: python-pillow Pillow: Pillow is a Python imaging library

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128066: python-pillow Pillow: Pillow is a Python imaging library

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...

GHSA-WQGW-9XFH-QF2G Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...

CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128067

The Pillow Python imaging library (versions 2.3.0 through 12.3.0 ) is vulnerable to a heap buffer overflow when saving compressed TIFF images using libtiff . The root cause is that the TiffImagePlugin._save path allows attacker-controlled image geometry tags (such as ImageWidth, ImageLength, or S...

CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

EUVD-2026-124778

Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...

CVE-2026-128066 Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

CVE-2026-128066

The Pillow Python imaging library (versions 1.0 through 12.3.0) is vulnerable to a Memory Denial of Service (DoS) in the ImageFileDirectory_v2.load() function within src/PIL/TiffImagePlugin.py. The root cause is that the library retains a separate bytes object for each out-of-line IFD tag value w...

EUVD-2026-124777

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

CVE-2026-128066

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

CVE-2025-43300

📚 CVE-2025-43300 - Detailed Vulnerability Analysis 🎯 Summary CVE-2025-43300 is a buffer overflow vulnerability in DNG Digital Negative file processing caused by an inconsistency between TIFF metadata and JPEG data , allowing remote code execution RCE. 🔍 1. DNG FILE ANATOMY Layered Structure: DNG...

CVE-2025-55891

CVE-2025-55891: Heap Corruption in TIFFCP.EXE docuPrinter Pro via Malformed TIFF File Summary A heap corruption vulnerability exists in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro, due to the use of an outdated and vulnerable version of libtiff v3.5.7. By supplying a...

Amazon Linux 2 : python-pillow (ALAS-2026-4107)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4107 advisory. A flaw was found in Pillow. When saving an image in the TIFF format, Pillow incorrectly forwards unknown metadata...

PT-2026-146092

Name of the Vulnerable Software and Affected Versions Pillow versions 1.0 through 12.3.0 Description In the Python imaging library, the ImageFileDirectory v2.load function in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD Image File Directory tag value. This...

Important: python-pillow

Issue Overview: A flaw was found in Pillow. When parsing GIF images with numerous comment blocks, the library repeatedly copies data in an inefficient manner. A remote attacker can exploit this vulnerability by submitting a specially crafted GIF image to an application that processes images using...