CVE-2026-112392 | python-pillow Pillow up to 12.x Rank-based filters ImagingExpand null pointer dereference

October 20, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x. It has been classified as problematic. This affects the function ImagingExpand of the component Rank-based filters. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-112392. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More