CVE-2026-112406 | Pillow up to 12.x PDF Page PdfParser.rewrite_pages infinite loop

October 19, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Pillow up to 12.x. Affected is the function PdfParser.rewrite_pages of the component PDF Page. Executing a manipulation can lead to infinite loop.

This vulnerability is tracked as CVE-2026-112406. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More