Everything Threat Times has reported about libtiff: 3 stories, newest first. Part of our Vulnerabilities coverage.
A heap disclosure flaw in Pillow’s TIFF encoder affects versions prior to 13.0.0. The issue triggers when saving crafted images with retained metadata.
A flaw in the Pillow library allows attackers to extract stale heap memory via crafted TIFF files, with a patch available in version 13.0.0.
A severe vulnerability in the Python imaging library Pillow allows heap buffer overflow and data disclosure when saving compressed TIFF files.