Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

影響: pip:Pillow <= 12.3.0 → 13.0.0

============================================================================ Double free in ImagingScaleAffine on calloc failure via Image.transform Location: src/libImaging/Geometry.c:866 in ImagingScaleAffine() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ============================================================================ There is a double free in Pillow's Image.transform() that crashes the process when an oversized transform runs out of memory. Instead of only raising MemoryErro…

在 GitHub Advisory Database 阅读

2026/10/22 05:03，GitHub Advisory Database 发布了“Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python。CVE：CVE-2026-112402。