CVE-2026-112395

A flaw was found in Pillow. Its tiled-TIFF image decoder does not properly restrict buffer boundaries when copying pixel data, leading to an out-of-bounds read. A remote attacker could exploit this vulnerability by providing a specially crafted tiled TIFF image to an application using the library. Successful exploitation could allow an attacker to obtain sensitive information from adjacent heap memory or cause a Denial of Service (DoS) by crashing the application.

This vulnerability is evaluated as having a Moderate impact because successful exploitation relies on an application ingesting and parsing an untrusted, specifically formatted tiled TIFF file. While reading outside the allocated tile buffer allows exposure of adjacent process memory within reconstructed image data or can induce an application crash, it does not permit arbitrary remote code execution or modification of system files. Red Hat services and container workloads that do not parse external user-supplied TIFF images remain unaffected in practice.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.