Thehackernews Critical Vulnerabilities in Pillow Library Enable Remote Code Execution
Article Content
- •Three critical vulnerabilities in Pillow library allow remote code execution and heap overflows.
- •CVE-2026-112900 exploits filename handling when processing EPS files with Ghostscript.
- •Pillow version 13.0.0 released on October 16, 2026, addresses these vulnerabilities.
A critical flaw (CVE-2026-112900) in Python's Pillow image library allows remote code execution via crafted EPS files. The vulnerability arises from improper handling of filenames when Pillow invokes Ghostscript, potentially enabling attackers to execute arbitrary commands. Two additional critical vulnerabilities (CVE-2026-112403 and CVE-2026-112393) involve heap overflows in JPEG and TIFF processing, respectively. All three vulnerabilities received a CVSS score of 9.2 and were disclosed on October 19, 2026. The maintainers released a patch (version 13.0.0) on October 16, 2026, addressing these issues. Pillow is widely used, with an estimated 436 million downloads per month, making it a significant target for exploitation. Currently, no has been reported, but the vulnerabilities could be exploited if not patched.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track CVE-2026-112393 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Pillow are affected?
What should I do if I'm using Pillow?
Are these vulnerabilities currently being exploited?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…