A flaw was found in Pillow. When saving an image in the TIFF format, Pillow incorrectly forwards unknown metadata tags to the underlying image processing library. A remote attacker could exploit this flaw by providing a specially crafted image containing malicious metadata to an application that processes and re-saves it. Successful exploitation allows the attacker to read out-of-bounds memory, leading to the disclosure of sensitive process memory or causing the application to crash, resulting in a Denial of Service (DoS).