CVE-2026-112403
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by GHSA, Bitnami.
Description
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | pillow | 13.0.0 |
| pip::GitHub Security Advisory pip | pillow | 13.0.0 |
| chainguard | apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk and 27 more | 2.77.0-r2 and 25 more |
| debian 11 | pillow | no fix listed |
| debian 12 | pillow | no fix listed |
| debian 13 | pillow | no fix listed |
| debian 14 | pillow | no fix listed |
| echo | pillow | no fix listed |
| echo pip::Echo OSV | pillow | 12.3.0+echo.1 |
| rapidfort debian 12 | pillow | 0:13.0.0-1 |
| rapidfort debian 13 | pillow | 0:13.0.0-1 |
| seal pip::Seal Security Database | pillow, seal-pillow | 10.0.1+sp999, 7.2.0+sp999, 9.3.0+sp999, 9.5.0+sp999 |
Show all 49 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | pillow | 13.0.0 |
| pip::GitHub Security Advisory pip | pillow | 13.0.0 |
| chainguard | apache-beam-python-3.11-sdk | 2.77.0-r2 |
| chainguard | apache-beam-python-3.12-sdk | 2.77.0-r5 |
| chainguard | apache-beam-python-3.13-sdk | 2.77.0-r5 |
| chainguard | apache-beam-python-3.14-sdk | 2.77.0-r5 |
| chainguard | gftools | 0.10.4-r1 |
| chainguard | jupyter-all-spark-notebook | 7.6.1_git20261016-r1 |
| chainguard | kserve | 0.21.0-r9 |
| chainguard | kserve-xgbserver | 0.21.0-r3 |
| chainguard | kubeflow-pipelines-visualization-server | 2.17.2-r7 |
| chainguard | label-studio | 1.23.2-r2 |
| chainguard | nemo-gym | 0.5.0_rc0_git20260729-r6 |
| chainguard | nemo-rl-cuda-13.0 | 0.7.0-r11 |
| chainguard | nemo-skills | 0.7.0_git20260911-r5 |
| chainguard | netbox | 4.7.3-r1 |
| chainguard | netbox-fips | 4.7.3-r1 |
| chainguard | open-webui | 0.12.3-r6 |
| chainguard | openstack-horizon-2025.2 | 25.5.2_git20260914-r12 |
| chainguard | openstack-horizon-2025.2-fips | 25.5.2_git20260914-r10 |
| chainguard | openstack-horizon-2026.1 | 25.7.3_git20261020-r1 |
| chainguard | openstack-horizon-2026.1-fips | 25.7.3_git20261019-r1 |
| chainguard | pgadmin4 | 9.18-r6 |
| chainguard | pgadmin4-fips | 9.18-r8 |
| chainguard | py3-pillow | 13.0.0-r0 |
| chainguard | py3-pytorch-cuda-13.0 | 2.14.1-r2 |
| chainguard | superset-5.0 | 5.0.0-r45 |
| chainguard | superset-6.0 | 6.0.0-r21 |
| chainguard | superset-6.1 | 6.1.0-r16 |
| chainguard | superset-fips-6.1 | 6.1.0-r11 |
| chainguard | tensorflow-cpu-jupyter | 2.21.0-r13 |
| chainguard | tensorflow-gpu-jupyter | 2.21.0-r13 |
| debian 11 | pillow | no fix listed |
| debian 12 | pillow | no fix listed |
| debian 13 | pillow | no fix listed |
| debian 14 | pillow | no fix listed |
| echo | pillow | no fix listed |
| echo pip::Echo OSV | pillow | 12.3.0+echo.1 |
| rapidfort debian 12 | pillow | 0:13.0.0-1 |
| rapidfort debian 13 | pillow | 0:13.0.0-1 |
| seal pip::Seal Security Database | pillow | 10.0.1+sp999, 7.2.0+sp999, 9.3.0+sp999, 9.5.0+sp999 |
| seal pip::Seal Security Database | seal-pillow | 10.0.1+sp999, 7.2.0+sp999, 9.3.0+sp999, 9.5.0+sp999 |
| wolfi | gftools | 0.10.4-r1 |
| wolfi | kserve | 0.21.0-r9 |
| wolfi | kubeflow-pipelines-visualization-server | 2.17.2-r7 |
| wolfi | open-webui | 0.12.3-r6 |
| wolfi | py3-pillow | 13.0.0-r0 |
| wolfi | superset-6.0 | 6.0.0-r21 |
| wolfi | superset-6.1 | 6.1.0-r16 |
References
- https://advisory.echohq.com/cve/CVE-2026-112403
- https://github.com/python-pillow/Pillow
- https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782
- https://nvd.nist.gov/vuln/detail/CVE-2026-112403