CVE-2026-112404 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

What is CVE-2026-112404?

CVE-2026-112404 is a high-severity vulnerability in Python Pillow, published on 19 Oct 2026.

Official description

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pillow does not verify that the required input row fits inside the row libtiff produced, while the strip path has this validation. Loading pixels from such a crafted TIFF can expose adjacent heap data in output pixels or crash the process. This issue is fixed in version 13.0.0.

Weakness: CWE-126

Which versions are affected by CVE-2026-112404?

3 open source packages ship an affected version, including pillow and Pillow. It affects 1 product.

Products include Python Pillow.

How do I fix CVE-2026-112404?

Upgrade pillow to 13.0.0 or later.

Is CVE-2026-112404 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-112404 exists.

Other vulnerabilities in Python Pillow

• CVE-2014-3007 Pillow command injection Critical 10.0
• CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions Critical 9.8
• CVE-2022-30595 Buffer over-flow in Pillow Critical 9.8
• CVE-2021-25289 Out of bounds write in Pillow Critical 9.8
• CVE-2016-4009 Pillow Integer overflow in ImagingResampleHorizontal Critical 9.8

All Python Pillow vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-pillow-2026-112404, DEBIAN-CVE-2026-112404, ECHO-f725-7164-03f9, GHSA-c6hw-5grf-ff96, ROOT-APP-PYPI-CVE-2026-112404, UBUNTU-CVE-2026-112404.