CVE-2026-112403Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported yesterday
EPSS0.3%
higher than 23% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 23% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image“The other, CVE-2026-112403, overflows a memory buffer when a program makes a thumbnail of a crafted lossless JPEG.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-112900, CVE-2026-112393
Thanks — we review every report.