CVE-2026-112896: CWE-125: Out-of-bounds Read in python-pillow Pillow
Description
CVE-2026-112896 is a high-severity vulnerability in the python-pillow Pillow library prior to version 13.0.0. It involves an out-of-bounds read in the TIFF encoder when TIFF metadata contains inconsistent plane size and BitsPerSample values. This flaw can lead to heap memory disclosure or application crashes during image re-encoding with libtiff. The issue is fixed in Pillow version 13.0.0.
CVSS v4.0
Score 8.8high
Affected software
python-pillow
Pillow
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Pillow versions before 13.0.0 contain an out-of-bounds read vulnerability (CWE-125) in the TIFF encoder. When a TIFF image with crafted metadata—specifically, a ColorMap buffer with a plane size inconsistent with BitsPerSample—is opened and then saved, the encoder may read beyond the allocated buffer. This can occur if the application re-encodes the TIFF with libtiff, potentially disclosing heap memory contents or causing a crash. The vulnerability has a CVSS 4.0 score of 8.8, indicating high severity. The issue is resolved in Pillow 13.0.0.
Potential Impact
An attacker can craft a TIFF image that triggers an out-of-bounds read in the Pillow TIFF encoder, leading to possible disclosure of heap memory or process crashes. This could compromise confidentiality or availability of the affected application processing the image. No known exploits are reported in the wild.
Mitigation Recommendations
Upgrade to Pillow version 13.0.0 or later, where this vulnerability is fixed. No other mitigation is indicated or required by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-19T20:16:09.856Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad697602cdf04f6569bbdc5
Added to database: 10/19/2026, 22:19:12 UTC
Last enriched: 10/19/2026, 22:33:21 UTC
Last updated: 10/19/2026, 22:48:25 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.