CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112891
UNKNOWNCVSS 0NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An atta
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog