Threats tagged 'brew-aider-cve-2026-112896'

CVE-2026-112896 is a heap out-of-bounds read vulnerability in Pillow's TIFF encoder caused by a mismatch in the expected ColorMap plane size when saving TIFF images with 16-bit samples. The issue arises when a TIFF image with a malformed ColorMap tag containing 768 SHORT values is loaded and then saved without reconciling the ColorMap size with the BitsPerSample value. This leads to a heap-buffer-overflow read during encoding, detected by ASAN, potentially exposing process memory. The vulnerability requires the application to load and save TIFF images using Pillow's libtiff-backed encoder with retained metadata. No arbitrary code execution or confirmed memory disclosure is demonstrated. The vulnerability has a CVSS 4.0 score of 8.8 (high severity).