CVE-2026-112404: Pillow TIFF tile and RGBA decode heap buffer over-read

CVE-2026-112404 · Severity: high · CVSS 4 · Published 2026-10-19

Pillow is a widely-used Python library for image processing. When processing certain crafted TIFF image files, Pillow can read beyond the boundaries of valid data in memory due to a mismatch with how libtiff interprets image tags. An attacker can craft a malicious TIFF file that, when opened by an application using Pillow, exposes adjacent data from memory in the decoded image or causes the application to crash.

Technologies: pillow (PyPI), Python Pillow Pillow. Vendors: PyPI, Python Pillow.

Quick answers

Is CVE-2026-112404 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-112404 being exploited in the wild.
How severe is CVE-2026-112404?
High severity, with a CVSS score of 4, published 19 October 2026.
Which products and versions are affected?
pillow (PyPI) >= 8.1.0, < 13.0.0, ECOSYSTEM:introduced=8.1.0,fixed=13.0.0; Python Pillow Pillow 8.1.0 to 12.x (before 13.0.0).
Is there a fix for CVE-2026-112404?
Yes. pillow (PyPI): upgrade to 13.0.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-112404 attacked?
It is attacked over the network.
Am I affected by CVE-2026-112404?
Check whether you run pillow (PyPI) or Python Pillow Pillow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • pillow (PyPI): upgrade to 13.0.0 or later
    pip install "pillow>=13.0.0"

Technical details

The vulnerability exists in Pillow's TIFF tile and RGBA unpacker decode paths, where tag interpretation differences between Pillow and libtiff cause insufficient validation of input row data bounds. Unlike the strip path which includes bounds checking, _decodeTile and the RGBA unpacker do not verify that required input fits within the row libtiff produced, allowing reads beyond valid buffer regions. An attacker can craft a TIFF with duplicated or conflicting PhotometricInterpretation or BitsPerSample tags to trigger this condition.

Affected products

  • Python Pillow Pillow 8.1.0 to 12.x (before 13.0.0)

Identifiers

  • CVE-2026-112404
  • GHSA-c6hw-5grf-ff96

Timeline

  • 2026-10-19: disclosed
  • 2026-10-16: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.