Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

影響: pip:Pillow >= 9.4.0, < 13.0.0 → 13.0.0

============================================================================ Heap buffer overflow writing JPEG comment after ICC profile fills buffer Location: src/libImaging/JpegEncode.c:330 in ImagingJpegEncode() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ A heap buffer overflow in Pillow's JPEG encoder lets anyone who can supply an image write up to 64 KB of bytes they choose, followed by the rest of the compre…

Read on GitHub Advisory Database

On 10/23/2026, 01:05 AM, GitHub Advisory Database published "Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer" (type: Advisory). Severity is "High" (high). Related technologies: Python. CVE: CVE-2026-96778.