Threats tagged 'brew-aider-cve-2026-96778'

A heap buffer overflow vulnerability exists in Pillow's JPEG encoder when writing a JPEG comment marker after an ICC profile fills the output buffer exactly. This occurs because the encoder does not check buffer space before writing the comment, allowing an out-of-bounds write that can crash the Python process or potentially lead to code execution. The flaw affects the handling of JPEG images that preserve color profiles and comments during re-saving. The issue was introduced in Pillow 9.4.0 and is triggered by re-saving images with large ICC profiles and comments using the documented API.