CVE-2026-112399 | python-pillow Pillow up to 12.x APNG Image.open allocation of resources

October 20, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x and classified as problematic. Affected by this issue is the function Image.open of the component APNG Handler. Executing a manipulation can lead to allocation of resources.

This vulnerability is handled as CVE-2026-112399. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More