Is CVE-2026-128067 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-128067 being exploited in the wild.

How severe is CVE-2026-128067?

High severity, published 13 November 2026.

Which products and versions are affected?

Pillow 8.4.0 and later; pillow (PyPI) <= 12.3.0.

How is CVE-2026-128067 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-128067?

Check whether you run Pillow or pillow (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-128067: Pillow heap buffer overflow in TIFF encoder with mismatched geometry tags

Q: Is there a fix for CVE-2026-128067?

No fixed version is recorded yet. Disable TIFF output or restrict TIFF compression to raw (uncompressed) format. For applications using exif=im.getexif() or tiffinfo= with compressed TIFF, sanitize or strip geometry tags (ImageWidth, ImageLength, SamplesPerPixel, PlanarConfiguration) from user-supplied or carried-over metadata before passing to save(). If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-128067 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-128067?

Check whether you run Pillow or pillow (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-128067 · Severity: high · Published 2026-11-13

Pillow's TIFF encoder allows metadata tags from uploaded images to override the actual image dimensions passed to libtiff, causing the encoder to read past or write into heap memory. An attacker can upload a specially crafted JPEG or TIFF to leak server process memory including pointers, or crash the worker process, when the application saves images with metadata preservation.

Technologies: Pillow, pillow (PyPI). Vendors: Pillow, PyPI.

Quick answers

Is CVE-2026-128067 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-128067 being exploited in the wild.
How severe is CVE-2026-128067?: High severity, published 13 November 2026.
Which products and versions are affected?: Pillow 8.4.0 and later; pillow (PyPI) <= 12.3.0.
Is there a fix for CVE-2026-128067?: No fixed version is recorded yet. Disable TIFF output or restrict TIFF compression to raw (uncompressed) format. For applications using exif=im.getexif() or tiffinfo= with compressed TIFF, sanitize or strip geometry tags (ImageWidth, ImageLength, SamplesPerPixel, PlanarConfiguration) from user-supplied or carried-over metadata before passing to save(). If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-128067 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-128067?: Check whether you run Pillow or pillow (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Disable TIFF output or restrict TIFF compression to raw (uncompressed) format. For applications using exif=im.getexif() or tiffinfo= with compressed TIFF, sanitize or strip geometry tags (ImageWidth, ImageLength, SamplesPerPixel, PlanarConfiguration) from user-supplied or carried-over metadata before passing to save().

Technical details

The vulnerability is a heap buffer over-read and over-write in libtiff integration (CWE-787). When Pillow saves an image as compressed TIFF, geometry tags (ImageWidth, ImageLength, SamplesPerPixel, PlanarConfiguration) from supplied EXIF data or source file metadata overwrite the encoder's internally-set values, but the row buffer is still sized from the actual image. This causes TIFFWriteScanline to read a larger scanline than the buffer holds. With Predictor=2, libtiff's in-place horizontal differencing turns the over-read into a heap over-write on each row, corrupting memory and aborting the process.

Affected products

Pillow Pillow 8.4.0 and later

Identifiers

CVE-2026-128067
GHSA-xcvg-w56q-r89m

Timeline

2026-11-12: disclosed: Advisory published
<UNKNOWN>: kev added

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.