CVE-2026-112391 | Pillow up to 12.x Parser PdfParser.get_value recursion

October 19, 2026 Yanac

A vulnerability classified as problematic was found in Pillow up to 12.x. This affects the function PdfParser.get_value of the component Parser. Such manipulation leads to uncontrolled recursion.

This vulnerability is traded as CVE-2026-112391. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More