CVE-2026-112901 | python-pillow Pillow up to 12.x XBM header parser XbmImageFile._open denial of service

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x. It has been classified as problematic. Affected is the function XbmImageFile._open of the component XBM header parser. Performing a manipulation results in denial of service.

This vulnerability was named CVE-2026-112901. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More