Search: CVE-2026-112398

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.7%	CVE-2026-112398Pillow · Heap-based Buffer Overflow Critical9.2EPSS 0.7%2026-10-19CVE Database V5CVE-2026-112398 A heap-based buffer overflow vulnerability exists in the FlashPix JPEG-tile decoder of the Python Pillow library prior to version 13.0.0. This occurs when decoding crafted OLE2 FlashPix files, leading to writing beyond allocated buffer boundaries. The flaw can corrupt heap memory and potentially allow arbitrary code execution. The issue is fixed in Pillow version 13.0.0. EPSS 0.7%Vulnerability python-pillow CWE-122	CVE Database V5	2026-10-19

Page 1 of 1 · 3 duplicate CVE records merged