CVE-2026-112397 | python-pillow Pillow up to 12.x Morphology ImageMorph.MorphOp.apply buffer overflow

October 20, 2026 Yanac

A vulnerability described as problematic has been identified in python-pillow Pillow up to 12.x. The affected element is the function ImageMorph.MorphOp.apply of the component Morphology. Executing a manipulation can lead to buffer overflow.

This vulnerability is registered as CVE-2026-112397. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More