CVE-2026-112896 - Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
CVE ID :CVE-2026-112896 Published : Oct. 19, 2026, 10:17 p.m. | 1 hour, 48 minutes ago Description :Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A...