CVE-2026-112397 | Vulnetix

CVE-2026-112397 PUBLISHED CVSS 8.7 HIGH

Reported by GitHub_M · Published October 19, 2026

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.

Risk Scores

CVSS 4.0

8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
python-pillow	Pillow	< 13.0.0
wolfi	superset-6.1	0
chainguard	kserve-xgbserver	0
wolfi	superset-6.0	0
wolfi	kubeflow-pipelines-visualization-server	0
chainguard	kserve	0
chainguard	superset-5.0	0
python-pillow	Pillow	0
chainguard	openstack-horizon-2025.2	0
chainguard	netbox	0
chainguard	label-studio	0
chainguard	superset-6.1	0
chainguard	apache-beam-python-3.11-sdk	0
chainguard	apache-beam-python-3.12-sdk	0
chainguard	nemo-gym	0
wolfi	py3-pillow	0
chainguard	pgadmin4	0
chainguard	jupyter-all-spark-notebook	0
chainguard	py3-pillow	0
wolfi	kserve	0

…and 19 more

Timeline

Oct 19, 2026 CVE Published
Oct 20, 2026 EPSS Score
Oct 20, 2026 Coalition ESS Score
Oct 21, 2026 EPSS Score
Oct 25, 2026 EPSS Score
Oct 27, 2026 CVE Updated
Oct 29, 2026 EPSS Score
Oct 30, 2026 Distribution Patch
Oct 30, 2026 Security Advisory
Oct 30, 2026 Security Advisory
Nov 1, 2026 Distribution Patch

References

https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8 x_refsource_CONFIRM
https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64 x_refsource_MISC
https://github.com/python-pillow/Pillow/releases/tag/13.0.0 x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2026-112397 advisory
https://github.com/advisories/GHSA-58r4-6rv3-gfh8 advisory

Open in Interactive Console →