Vulnerabilities
Pillow 13.0.0 Released to Patch CVE-2026-112403 Critical Memory Write in JPEG
The Python imaging library releases version 13.0.0 to fix CVE-2026-112403, a critical flaw allowing arbitrary memory writes via specific JPEG files.
heap overflow
Everything Patch Gazette has reported about heap overflow: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Pillow 13.0.0 releases fix for CVE-2026-112393 heap overflow in TIFF handling
A critical vulnerability in the Python Pillow library allows code execution via malformed TIFF files. Version 13.0.0 resolves the issue for affected users.