CVE-2026-112395

A flaw was found in Pillow. Its tiled-TIFF image decoder does not properly restrict buffer boundaries when copying pixel data, leading to an out-of-bounds read. A remote attacker could exploit this vulnerability by providing a specially crafted tiled TIFF image to an application using the library...

PT-2026-55410

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height and encoded size to make the decoder decode large amounts of compressed data...

UBUNTU-CVE-2026-46604

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset...