CVE-2026-40192 | Pillow up to 12.1.x FITS Image allocation of resources (GHSA-whj4-6x5x-4v2j)

April 16, 2026 Yanac

A vulnerability classified as problematic was found in Pillow up to 12.1.x. The impacted element is an unknown function of the component FITS Image Handler. Executing a manipulation can lead to allocation of resources.

This vulnerability is handled as CVE-2026-40192. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More