CVE-2026-112390

USN-9064-1: Pillow vulnerabilities

Pillow vulnerabilities

It was discovered that Pillow could enter an infinite loop while determining the frame count of a MIC image. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112390) It was discovered that Pillow's PdfParser.get_value() could recurse without a limit while reading nested PDF objects. An attacker could possibly use this issue to cause a denial of…

19. Okt 2026

Ausgewertete Quellen

• Ubuntu
  USN-9064-1: Pillow vulnerabilities
• NVD
  CVE-2026-112390
• GitHub
  https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9