A vulnerability identified as problematic has been detected in python-pillow Pillow up to 12.x. Affected by this vulnerability is an unknown functionality of the component MSP RLE decoder. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-112892. The attack may be initiated remotely. There is no available exploit.... Weiterlesen: CVE-2026-112892 | python-pillow Pillow up to 12.x MSP RLE decoder buf…
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-112892 | python-pillow Pillow up to 12.x MSP RLE decoder buffer overflow (Nessus ID 376140)
A vulnerability identified as problematic has been detected in python-pillow Pillow up to 12.x. Affected by this vulnerability is an unknown functionality of…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
BSI-Warnung (Deutschland)CVE-2026-112892
Red Hat Enterprise Linux (pillow and aspell): Mehrere Schwachstellen mittel29.10.2026CISA-SSVC-Triage (vulnrichment)CVE-2026-112892
Exploitation: none (Keine bekannte Ausnutzung)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-10-22T21:11:15.830778Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
War diese Seite hilfreich?