CVE-2026-112894 | python-pillow Pillow up to 12.x Pdf Parser PdfParser.next_object_id resource consumption

October 19, 2026 Yanac

A vulnerability, which was classified as problematic, was found in python-pillow Pillow up to 12.x. The impacted element is the function PdfParser.next_object_id of the component Pdf Parser. The manipulation results in resource consumption.

This vulnerability is known as CVE-2026-112894. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More