Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
vulnerability Imported story

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Source: The Hacker News · Published · Last checked 1 week ago · 1 min read
Illustration generated by CyberSecurity.pk from the story topic.
Read original source ↗ (thehackernews.com)

Publisher excerpt From The Hacker News

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Related CVEs

CVE-2026-112900 · CRITICAL
Keywords: CVE-2026-112900vulnerabilityvulnerability newsThe Hacker Newscybersecurity newssecurity news Pakistan

Reference: The Hacker News — thehackernews.com ↗

Related news

Chromium CVE-2026-76025: Use after freeChromium CVE-2026-76026: Memory corruptionChromium CVE-2026-76027: Memory corruptionChromium CVE-2026-76028: Use after free