CVE-2026-112395: Pillow tiled-TIFF decoder heap buffer overread

CVE-2026-112395 · Severity: medium · CVSS 6.5 · Published 2026-10-19

Pillow is a Python library for image processing used by applications to load and manipulate image files. A flaw in its TIFF image decoder can allow an attacker to craft a malicious TIFF file that, when opened by an application, reads past the tile buffer boundary. This could expose sensitive data from the application's memory or cause the application to crash.

Technologies: pillow (PyPI), Python Pillow Pillow. Vendors: PyPI, Python Pillow.

Quick answers

Is CVE-2026-112395 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-112395 being exploited in the wild.
How severe is CVE-2026-112395?
Medium severity, with a CVSS score of 6.5, published 19 October 2026.
Which products and versions are affected?
pillow (PyPI) >= 8.2.0, < 13.0.0, ECOSYSTEM:introduced=8.2.0,fixed=13.0.0; Python Pillow Pillow 8.2.0 to 12.3.0.
Is there a fix for CVE-2026-112395?
Yes. pillow (PyPI): upgrade to 13.0.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-112395 attacked?
It is attacked over the network or with local access, in a software library.
Am I affected by CVE-2026-112395?
Check whether you run pillow (PyPI) or Python Pillow Pillow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • pillow (PyPI): upgrade to 13.0.0 or later
    pip install "pillow>=13.0.0"

Technical details

The tiled-TIFF decoder in Pillow's _decodeTile function fails to validate that libtiff returns a tile allocation large enough for the required row stride multiplied by tile length. The stride-and-copy loop then walks beyond the allocated buffer, reading adjacent heap data. An attacker supplies a crafted tiled TIFF file; no authentication or user interaction beyond opening the file is required. A network-based attack vector is possible if the application processes untrusted TIFF files.

Affected products

  • Python Pillow Pillow 8.2.0 to 12.3.0

Identifiers

  • CVE-2026-112395
  • GHSA-462x-pgg6-55fp

Timeline

  • 2026-10-19: disclosed
  • 2026-10-16: patched: Version 13.0.0 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.