CVE-2026-112402

{
  "etk_id": "ETK-2026-2351",
  "cve_id": "CVE-2026-112402",
  "display_id": "CVE-2026-112402",
  "ghsa_id": "GHSA-7mwm-ghpf-9vrm",
  "euvd_id": "EUVD-2026-104641",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Double free in Pillow Image.transform",
  "summary": "Pillow versions before 13.0.0 can double free image memory while handling certain Image.transform() operations. An attacker who can control transform dimensions and induce the relevant allocation failure may crash the process and cause heap corruption; the affected path uses EXTENT or scale-and-translate AFFINE transforms with default nearest-neighbor resampling.",
  "mitigation": "Upgrade Pillow to version 13.0.0 or later. Until upgraded, restrict untrusted transform dimensions and avoid processing attacker-controlled transforms under constrained memory limits.",
  "vendor": "pip",
  "product": "Pillow",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 12.3.0"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "13.0.0"
      ],
      "package_name": "Pillow",
      "purl": "pkg:pypi/Pillow"
    }
  ],
  "cwes": null,
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 8.00057315,
  "t0_at": "2026-10-19T21:18:57.027000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-21T20:03:56+00:00",
      "days": 1.9479047800925926,
      "is_lower_bound": false,
      "measured_at": "2026-10-19T21:18:57.027000+00:00",
      "url": "https://github.com/advisories/GHSA-7mwm-ghpf-9vrm"
    },
    "trigger_signal": {
      "at": "2026-10-19T21:18:57.027000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-19T21:18:57.027000+00:00",
      "url": "https://github.com/advisories/GHSA-7mwm-ghpf-9vrm"
    }
  }
}