Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

影響: pip:Pillow >= 9.4.0, < 13.0.0 → 13.0.0

============================================================================ Heap buffer overflow writing JPEG comment after ICC profile fills buffer Location: src/libImaging/JpegEncode.c:330 in ImagingJpegEncode() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ A heap buffer overflow in Pillow's JPEG encoder lets anyone who can supply an image write up to 64 KB of bytes they choose, followed by the rest of the compre…

GitHub Advisory Databaseで読む

2026/10/23 01:05、GitHub Advisory Databaseが「Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: Python。CVE: CVE-2026-96778。