Lucene search
+L

pillow-uaf-research

🗓️ 29 Oct 2026 23:06:32Reported by 8hw3Type 
githubexploit
 githubexploit
🔗 github.com👁 11 Views

Use-after-free in Pillow allows post-free write and fileless memory injection.

Related
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
Pillow -- multiple vulnerabilities
17 Oct 202600:00
–freebsd
cgr
Chainguard
CVE-2026-112396 vulnerabilities
22 Oct 202620:55
–cgr
cgr
Chainguard
CVE-2026-113792 vulnerabilities
22 Oct 202614:56
–cgr
circl
Circl
CVE-2026-112396
19 Oct 202621:22
–circl
circl
Circl
CVE-2026-113792
21 Oct 202618:49
–circl
cnnvd
CNNVD
Pillow Resource Management Error Vulnerability
18 Oct 202616:00
–cnnvd
cnnvd
CNNVD
pypdf resource management error vulnerability
20 Oct 202616:00
–cnnvd
cve
CVE
CVE-2026-112396
19 Oct 202621:02
–cve
cve
CVE
CVE-2026-113792
21 Oct 202615:55
–cve
cvelist
Cvelist
CVE-2026-112396 Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
19 Oct 202621:02
–cvelist
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Oct 2026 23:13Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.15.9 - 7.5
CVSS 46
EPSS0.00694
SSVC
11