CVE-2026-112899

The Pillow Python imaging library (versions 2.3.0 through 12.3.0 ) contains a flaw where the EPS image loader fails to validate scaled image dimensions before invoking Ghostscript . An attacker can provide a crafted EPS file that forces the rendering process to generate excessively large temporar...