Report: Update: CVE-2026-42310 - Pillow: PDF Parsing Trailer Infinite Loop (DoS)

Report: Update: CVE-2026-42310 - Pillow: PDF Parsing Trailer Infinite Loop (DoS)

CVE ID :CVE-2026-42310 Published : May 9, 2026, 4:10 a.m. | 1 hour, 34 minutes ago Description :Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
May 9, 2026
Affected Product: Python