CVE-2026-112406

The Pillow Python imaging library (versions 5.1.0 through 13.0.0 ) contains a vulnerability where PdfParser.rewrite_pages() can enter an infinite loop . The root cause is that the function follows Parent relationships in a page tree without detecting cycles. An attacker can provide a cyclic PDF t...