CVE-2026-112396

Vendor

Canonical

Product

ImageMagick / Ghostscript / FFmpeg / libxml2

CVSS

5.9

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Ubuntu notice Ubuntu 9h ago

   Pillow vulnerabilities

   It was discovered that Pillow could enter an infinite loop while determining the frame count of a MIC image. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu…

   CVE-2026-112390CVE-2026-112391CVE-2026-112392+36 more Canonical
2. 8
   CVE NVD 24d ago

   Pillow is a Python imaging library.

   Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to…

   CVSS 5.9 Fix available CVE-2026-112396