VulnPulse
HighAdvisoryPython

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

影響: pip:Pillow <= 12.3.0 → 13.0.0

============================================================================ Double free in ImagingScaleAffine on calloc failure via Image.transform Location: src/libImaging/Geometry.c:866 in ImagingScaleAffine() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ There is a double free in Pillow's Image.transform() that crashes the process when an oversized transform runs out of memory. Instead of only raising MemoryErro…

Read on GitHub Advisory Database

CVECVE-2026-112402
SourceGitHub Advisory Database
Fetched10/22/2026, 05:20 AM
DataMarkdown JSON

On 10/22/2026, 05:03 AM, GitHub Advisory Database published "Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform" (type: Advisory). Severity is "High" (high). Related technologies: Python. CVE: CVE-2026-112402.