Threats tagged 'bit-pillow-2026-96644'

A heap over-read vulnerability exists in Pillow's WMF/EMF rendering on Windows prior to version 13.0.0. The issue arises from 16-bit truncation of dimensions used for memory allocation, while pixel data copying uses full 32-bit dimensions. This mismatch can cause the renderer to read beyond allocated heap memory, potentially leading to memory disclosure or application crashes. The vulnerability is fixed in Pillow 13.0.0.