Threats tagged 'brew-aider-cve-2026-112395'

A vulnerability in Pillow's tiled TIFF image decoder (_decodeTile) causes a heap buffer over-read due to a mismatch between the allocated tile buffer size and the expected row-by-row processing size. This occurs when libtiff returns a tile size smaller than the product of row byte size and tile length, leading to out-of-bounds reads during pixel data copying. An attacker supplying a crafted TIFF image can trigger a process crash (DoS) and potentially leak adjacent heap memory into the decoded image buffer.