Threats tagged 'brew-aider-cve-2026-112403'

A heap buffer overflow vulnerability exists in Pillow's JPEG decoding when handling lossless JPEG images (SOF3) with scaling. The flaw arises because the decoding buffer is allocated based on scaled dimensions, but libjpeg-turbo ignores scaling for lossless JPEGs and writes full-size scanlines, causing an overflow. This can lead to memory corruption and an application error during image processing.