Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

影響: pip:Pillow <= 12.3.0 → 13.0.0

============================================================================ Memory disclosure and segfault in libtiff encoder via crafted TIFF tags Location: src/encode.c:1014 in PyImaging_LibTiffEncoderNew() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ A crafted TIFF file of a few hundred bytes makes Pillow copy an attacker-chosen amount of its own process memory into the TIFF it writes back out, or crash the pro…

在 GitHub Advisory Database 阅读

2026/10/22 06:29，GitHub Advisory Database 发布了“ Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python。CVE：CVE-2026-112902。