Threats tagged 'oesa-2026-4663'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.7%	CVE-2026-112398 · python-pillow security update Critical9.2EPSS 0.7%2026-11-04GCVE Database A critical heap memory corruption vulnerability exists in the FlashPix JPEG-tile decoder of the python-pillow library prior to version 13.0.0. This flaw allows crafted OLE2 FlashPix files to cause buffer overflows during image decoding, potentially enabling arbitrary code execution. The issue is fixed in version 13.0.0. EPSS 0.7%Report on CVE-2026-112398 Vulnerability #oesa-2026-4663 #openeuler-22-03-lts-sp4	GCVE Database	2026-11-04

Page 1 of 1