CVE-2026-112392

Received Received - Intake

Pillow Rank Filter Zero-Size Image Crash

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: GitHub, Inc.

Description

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-19

Last Modified

2026-10-19

Generated

2026-10-20

AI Q&A

2026-10-20

EPSS Evaluated

N/A

NVD

CVE-2026-112392

Affected Vendors & Products

Vendor	Product	Version / Range
python-pillow	Pillow	< 13.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

Pillow is a Python imaging library. Prior to version 13.0.0, its rank-based filters can dereference invalid image storage when processing a zero-size image. This causes ImagingExpand() to allocate output but fail while reading the first pixel from empty input, leading to a native process crash.

Detection Guidance

To detect this vulnerability, check if your system uses Pillow versions prior to 13.0.0. Run: pip show Pillow to verify the installed version. If the version is below 13.0.0, the system is vulnerable.

Impact Analysis

An attacker could supply or create a zero-size image and apply a rank, median, minimum, or maximum filter. This would crash the application processing the image, potentially causing denial of service or unexpected termination.

Mitigation Strategies

Upgrade Pillow to version 13.0.0 or later immediately. Use the command: pip install --upgrade Pillow. This fixes the issue by preventing crashes from zero-size images with rank-based filters.

Hi! I’m here to help you understand CVE-2026-112392. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70