CVE-2026-112403 | python-pillow Pillow up to 12.x JPEG decoder ImagingJpegDecode buffer overflow

October 20, 2026 Yanac

A vulnerability classified as critical has been found in python-pillow Pillow up to 12.x. The impacted element is the function ImagingJpegDecode of the component JPEG decoder. The manipulation leads to buffer overflow.

This vulnerability is documented as CVE-2026-112403. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More