Skip to content
OpenAdvisories
Critical · 9.2 Public exploit CVE-2026-112403 BIT-pillow-2026-112403EUVD-2026-104642GHSA-8g5g-8vmr-9782PYSEC-2026-4332

Pillow: Heap buffer overflow in ImagingJpegDecode

Published Oct 19, 2026 · Updated Oct 22, 2026 · Assigned by GitHub_M

Vendor: python-pillow Product: Pillow Package: gftools Package: kserve-storage-controller Package: kubeflow-pipelines-visualization-server Package: open-webui Package: pillow Package: pillow Package: pillow Package: pillow-python2 Package: py3.10-pillow Package: py3.11-pillow Package: py3.12-pillow Package: py3.13-pillow Package: superset-6.0 Package: superset-6.1 Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.

Affected products

VendorProductAffectedFixed
python-pillow Pillow < 13.0.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pillow No fix yet —
Debian 13 pillow No fix yet —
Debian 12 pillow No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pillow No fix yet —
Ubuntu 26.04 LTS pillow No fix yet —
Ubuntu 24.04 LTS pillow No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS pillow-python2 No fix yet —
Ubuntu Pro 18.04 LTS pillow No fix yet —
Ubuntu Pro 16.04 LTS pillow No fix yet —
Ubuntu Pro 14.04 LTS pillow No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python-Pillow 7.2.0-150300.3.33.1 SUSE-SU-2026:5038-1
SLES 15 SP6 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 3 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 python-Pillow 11.3.0-160000.9.1 SUSE-SU-2026:24656-1
SLES for SAP 15 SP6 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES for SAP 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES for SAP 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLES 16.0 python-Pillow 11.3.0-160000.9.1 SUSE-SU-2026:24656-1
SLE HPC 15 SP5 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1
SLE HPC 15 SP4 python-Pillow 9.5.0-150400.5.28.1 SUSE-SU-2026:5194-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 python-Pillow 11.3.0-160000.9.1 openSUSE-SU-2026:22246-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling gftools 0.10.4-r1 —
Wolfi rolling kserve-storage-controller 0.21.0-r9 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.17.2-r7 —
Wolfi rolling open-webui 0.12.3-r6 —
Wolfi rolling py3.10-pillow No fix yet —
Wolfi rolling py3.11-pillow +2 13.0.0-r0 —
Wolfi rolling superset-6.0 6.0.0-r21 —
Wolfi rolling superset-6.1 6.1.0-r16 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • al4n4n/CVE-2026-112403 ★ 0 · Oct 23, 2026

    CVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pillow < 13.0.0 13.0.0 GHSA-8g5g-8vmr-9782

Advisories 4

References