CVE-2026-112402 | python-pillow Pillow up to 12.x Transform ImagingScaleAffine double free

October 20, 2026 Yanac

A vulnerability, which was classified as critical, has been found in python-pillow Pillow up to 12.x. This impacts the function ImagingScaleAffine of the component Transform. This manipulation causes double free.

This vulnerability appears as CVE-2026-112402. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More