Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application that re-encodes the attacker's TIFF with libtiff can trigger the out-of-bounds read. This can disclose heap memory in the output or crash the process. This issue is fixed in version 13.0.0.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742 Patch
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p Exploit, Vendor Advisory
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 8
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-27 14:55
- StatusPublished → AnalyzedNVD modified 2026-10-27 14:55
- StatusUndergoing Analysis → PublishedNVD modified 2026-10-20 13:55
- StatusPublished → Undergoing AnalysisNVD modified 2026-10-20 19:48
- StatusReceived → PublishedNVD modified 2026-10-20 13:55
- StatusPublished → ReceivedNVD modified 2026-10-20 14:16
- StatusReceived → PublishedNVD modified 2026-10-19 21:59
- First seenCVSS 8.8NVD modified 2026-10-19 22:17
Affected (CPE criteria) 1
cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*
References 4
- https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742 Patch
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0 Release Notes
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p Exploit, Vendor Advisory
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p Exploit, Vendor Advisory