mcpmark-eval-liuhezi/security-advisory-research
PoCSecurity reading group demo: Pillow GHSA-5x8w-8jj5-q52h (CVE-2026-112398) heap buffer overflow research note
view exploit source poc_in_githubauthor mcpmark-eval-liuhezipublished 2026-10-23catalog poc_in_github
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-112398US | critical9.8 | Exploit | ||
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan