CVE-2026-112392 - Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE ID :CVE-2026-112392 Published : Oct. 19, 2026, 10:17 p.m. | 1 hour, 48 minutes ago Description :Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and...