8.7

CVE-2026-112895: Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Analyzed
AliasesDEBIAN-CVE-2026-112895GHSA-p4wg-p73j-c528CGA-3g4m-3g6f-g629
Published 19-10-2026Last modified 20-10-2026

Vulnerability summary

CVE-2026-112895 is a high (CVSS 8.7) Uncontrolled Recursion vulnerability in python-pillow pillow. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 48.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?
CVSS score
8.7/10
010
High · v4.0 (CVE.org)
EPSS score
0.59%
0%100%
Low · Change unavailable
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
SUSE-SU-2026:5038-1

Timeline

  1. 19-10-2026
    PublishedVulnerability first disclosed.
  2. 20-10-2026
    Last modifiedVulnerability information updated.

Description

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offset guard, so deep or cyclic page trees and long chains of unique trailer offsets can exhaust the Python stack. Repeated non-cyclic /Kids references can also cause super-linear CPU and memory use. An attacker can supply such a PDF to an application that calls Image.save with PDF append enabled. This can raise an uncaught RecursionError or consume excessive CPU and memory before output is written, causing denial of service. This issue is fixed in version 13.0.0.

CVSS metrics

9 scores · 7 sources · 2 versions

EPSS trend

Probability

0.59%

Chance of exploitation in the next 30 days

Percentile

48%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

20-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • githubUnverified

    Pillow

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard44 products
  • apache-beam-python-3.11-sdk< 2.77.0-r2
  • apache-beam-python-3.12-sdkAll versions (No fix recorded) | < 2.77.0-r5
  • apache-beam-python-3.13-sdkAll versions (No fix recorded) | < 2.77.0-r5
  • apache-beam-python-3.14-sdk< 2.77.0-r5
  • gftoolsAll versions (No fix recorded) | < 0.10.4-r1
Wolfi11 products
  • gftoolsAll versions (No fix recorded) | < 0.10.4-r1
  • kserve-storage-controllerAll versions (No fix recorded) | < 0.21.0-r9
  • kubeflow-pipelines-visualization-serverAll versions (No fix recorded) | < 2.17.2-r7
  • mlflowAll versions (No fix recorded)
  • open-webuiAll versions (No fix recorded) | < 0.12.3-r6
Ubuntu2 products
  • pillowAll versions (No fix recorded)
  • pillow-python2All versions (No fix recorded)
Debian1 product
  • pillowAll versions (No fix recorded)
PyPI1 product
  • pillow≥ 5.1.0, < 13.0.0
Python1 product
Python-pillow1 product

7 vendors · 61 products

References

9 links