CVE-2026-112397CWE-787

CVE-2026-112397

published October 20, 2026

CVSS
8.7
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00436 · 36.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-10-20T02:17Z
References (4)
https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64 · [email protected]https://github.com/python-pillow/Pillow/releases/tag/13.0.0 · [email protected]https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8 · [email protected]https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 21 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 19 OCT 21:17Z
    Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
    cvelistv5
  • 19 OCT 21:17Z
    Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
    cvelistv5