CVE-2026-112394 | python-pillow Pillow up to 12.x Raw Decoders heap-based overflow

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x. It has been classified as critical. The impacted element is an unknown function of the component Raw Decoders. This manipulation causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-112394. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More