Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

影響: pip:Pillow >= 8.1.0, < 13.0.0 → 13.0.0

============================================================================ OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels Location: src/libImaging/TiffDecode.c:483 in _decodeTile() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ Pillow reads past the end of a heap buffer when decoding certain malformed compressed TIFF files, and copies the bytes it reads into the pixels of the image it re…

GitHub Advisory Database에서 읽기

2026. 10. 21. 오전 05:42, GitHub Advisory Database에서 "Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-112404.