CVE-2026-112403
Fixed in a distro release EPSS <1%CVSS 9.2
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.
Products: python-pillow Pillow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | pillow | 13.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | apache-beam-python-3.11-sdk | 2.77.0-r2 |
| Chainguard | apache-beam-python-3.12-sdk | 2.77.0-r5 |
| Chainguard | apache-beam-python-3.13-sdk | 2.77.0-r5 |
| Chainguard | apache-beam-python-3.14-sdk | 2.77.0-r5 |
| Chainguard | gftools | 0.10.4-r1 |
| Chainguard | jupyter-all-spark-notebook | 7.6.1_git20261016-r1 |
| Chainguard | kserve-storage-controller | 0.21.0-r9 |
| Chainguard | kserve-xgbserver | 0.21.0-r3 |
| Chainguard | kubeflow-pipelines-visualization-server | 2.17.2-r7 |
| Chainguard | label-studio | 1.23.2-r2 |
| Chainguard | mlflow | no fix |
| Chainguard | mlflow-fips | no fix |
| Chainguard | nemo-gym | 0.5.0_rc0_git20260729-r6 |
| Chainguard | nemo-rl-cuda-13.0 | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-automodel | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-mcore | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-sglang | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-vllm | 0.7.0-r11 |
| Chainguard | nemo-skills | no fix |
| Chainguard | netbox | 4.7.3-r1 |
| Chainguard | netbox | no fix |
| Chainguard | netbox-fips | no fix |
| Chainguard | open-webui | 0.12.3-r6 |
| Chainguard | open-webui | no fix |
| Chainguard | openstack-horizon-2025.2 | 25.5.2_git20260914-r12 |
| Chainguard | openstack-horizon-2025.2-fips | no fix |
| Chainguard | openstack-horizon-2025.2-fips | 25.5.2_git20260914-r10 |
| Chainguard | openstack-horizon-2026.1 | no fix |
| Chainguard | openstack-horizon-2026.1-fips | 25.7.3_git20261019-r1 |
| Chainguard | pgadmin4 | 9.18-r6 |
| Chainguard | pgadmin4-fips | 9.18-r8 |
| Chainguard | py3.10-pillow | no fix |
| Chainguard | py3.10-pytorch-cuda-12.6 | no fix |
| Chainguard | py3.10-pytorch-cuda-13.0 | no fix |
| Chainguard | py3.10-pytorch-cuda-13.2 | no fix |
| Chainguard | py3.10-vllm-cuda-12.4 | no fix |
| Chainguard | py3.11-pillow | 13.0.0-r0 |
| Chainguard | py3.11-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.12-pillow | 13.0.0-r0 |
| Chainguard | py3.12-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.13-pillow | 13.0.0-r0 |
| Chainguard | py3.13-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.14-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | superset-5.0 | 5.0.0-r45 |
| Chainguard | superset-6.0 | 6.0.0-r21 |
| Chainguard | superset-6.1 | no fix |
| Chainguard | superset-6.1 | 6.1.0-r16 |
| Chainguard | superset-fips-6.1 | 6.1.0-r11 |
| Chainguard | tensorflow-cpu-jupyter | 2.21.0-r13 |
| Chainguard | tensorflow-gpu-jupyter | 2.21.0-r13 |
| Debian 12 | pillow | no fix |
| Debian 13 | pillow | no fix |
| Debian 14 | pillow | no fix |
| Ubuntu 22.04 LTS | pillow | no fix |
| Ubuntu 24.04 LTS | pillow | no fix |
| Ubuntu 26.04 LTS | pillow | no fix |
| Ubuntu 26.10 | pillow | no fix |
| Ubuntu Pro 14.04 LTS | pillow | no fix |
| Ubuntu Pro 16.04 LTS | pillow | no fix |
| Ubuntu Pro 18.04 LTS | pillow | no fix |
| Ubuntu Pro 20.04 LTS | pillow | no fix |
| Ubuntu Pro 20.04 LTS | pillow-python2 | no fix |
| Wolfi | gftools | 0.10.4-r1 |
| Wolfi | kserve-storage-controller | 0.21.0-r9 |
| Wolfi | kubeflow-pipelines-visualization-server | 2.17.2-r7 |
| Wolfi | mlflow | no fix |
| Wolfi | open-webui | no fix |
| Wolfi | open-webui | 0.12.3-r6 |
| Wolfi | py3.10-pillow | no fix |
| Wolfi | py3.11-pillow | 13.0.0-r0 |
| Wolfi | py3.12-pillow | 13.0.0-r0 |
| Wolfi | py3.13-pillow | 13.0.0-r0 |
| Wolfi | superset-6.0 | 6.0.0-r21 |
| Wolfi | superset-6.1 | 6.1.0-r16 |
| Wolfi | superset-6.1 | no fix |