Tag
#buffer-overflow
Pillow FlashPix Heap Overflow RCE (CVE-2026-112398)
Decoding a crafted FlashPix image in Pillow 12.3.0 or older with olefile installed lets an attacker run commands; Pillow 13.0.0 fixes CVE-2026-112398.
Oct 24, 2026
Tag
Decoding a crafted FlashPix image in Pillow 12.3.0 or older with olefile installed lets an attacker run commands; Pillow 13.0.0 fixes CVE-2026-112398.
Oct 24, 2026