Pillow versions from 11.3.0 up to but not including 13.0.0 contain a heap use-after-free vulnerability triggered when libtiff rejects a tag during TIFF encoding to an in-memory buffer. This flaw can cause a process crash and may allow code execution. The issue is resolved in Pillow version 13.0.0.