CVE-2026-112403

What it is

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.

At a glance

Exploitability

Can be exploited over the network without logging in. High risk of data exposure, data tampering, service disruption.

Exploit odds

0.9% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-10-19 22:17 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-27 15:00 UTC Last updatedMost recent change to the record

Details

Published

2026-10-19 22:17 UTC

Last modified

2026-10-27 15:00 UTC

Exploit probability

0.9% · EPSS, next 30 days

Weakness

CWE-122

Record status

Analyzed

Affected

• Python Pillow < 13.0.0

Attack profile CVSS 4.0 · 9.2

Attack vector

Network

Complexity

High

Attack requirements

None

Privileges needed

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High