CVE-2026-112898 | python-pillow Pillow 11.3.0/12.1.1/12.3.0 Palette Cache ImagingPaletteCacheUpdate uninitialized resource

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow 11.3.0/12.1.1/12.3.0. It has been rated as problematic. Affected by this issue is the function ImagingPaletteCacheUpdate of the component Palette Cache. The manipulation leads to uninitialized resource.

This vulnerability is referenced as CVE-2026-112898. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More