CVE-2026-112403

The Pillow Python imaging library contains a heap buffer overflow in the ImagingJpegDecode component affecting versions prior to 13.0.0 . The root cause is that the decoder fails to verify libjpeg 's actual output width and component count after a draft scale is requested. Specifically, an 8-bit ...