CVE-2026-112892 | python-pillow Pillow up to 12.x MSP RLE decoder buffer overflow

October 19, 2026 Yanac

A vulnerability identified as problematic has been detected in python-pillow Pillow up to 12.x. Affected by this vulnerability is an unknown functionality of the component MSP RLE decoder. The manipulation leads to buffer overflow.

This vulnerability is listed as CVE-2026-112892. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More