CVE-2026-112403

A flaw was found in Pillow. A remote attacker could exploit this vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS by supplying a specially crafted lossless JPEG image to an application that downscales images or generates thumbnails. This issue occurs because the...