Threats tagged 'brew-aider-cve-2026-112404'

CVE-2026-112404 is a high-severity vulnerability in the Pillow image processing library that causes out-of-bounds (OOB) reads in TIFF image decoding. Specifically, the flaw occurs in the _decodeTile() and _decodeAsRGBA() functions when processing malformed compressed TIFF files with conflicting TIFF tags. This leads to heap memory being leaked into the pixel data of the decoded image. An attacker who can supply a crafted TIFF file to an application using Pillow can cause the application to disclose fragments of its heap memory. Larger files may cause the application to crash. No special configuration is needed to trigger this issue.