CVE-2026-112892

The Pillow Python imaging library (versions 4.1.0 to 13.0.0 ) contains a vulnerability in the MSP RLE decoder where a small file can expand into an unbounded in-memory buffer . The root cause is that the decoder writes run-length output to BytesIO without limiting expansion to the declared image ...