ETK-2026-3298Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3298",
  "cve_id": null,
  "display_id": "ETK-2026-3298",
  "ghsa_id": "GHSA-xcvg-w56q-r89m",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Heap buffer overflow in Pillow TIFF image saving",
  "summary": "Pillow versions before 13.0.0 can mishandle image metadata when saving images as compressed TIFF files through libtiff. An attacker who can supply an image that an application later converts or re-saves as compressed TIFF may cause process crashes or expose process memory in generated output.",
  "mitigation": "Upgrade Pillow to version 13.0.0 or later. Until upgrading, avoid saving untrusted images as compressed TIFF and strip or replace source TIFF and EXIF metadata before TIFF output.",
  "vendor": "pip",
  "product": "Pillow",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 12.3.0"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "13.0.0"
      ],
      "package_name": "Pillow",
      "purl": "pkg:pypi/Pillow"
    }
  ],
  "cwes": [
    787
  ],
  "cvss_score": 7,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 30.743244516666667,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-11-01T23:27:59+00:00",
      "days": -0.911973036400463,
      "is_lower_bound": true,
      "measured_at": "2026-11-02T21:21:13.504824+00:00",
      "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xcvg-w56q-r89m"
    }
  }
}