CVE-2026-112392

The Pillow Python imaging library contains a NULL pointer dereference vulnerability in its rank-based filters, affecting versions prior to 13.0.0 . The issue occurs when ImagingExpand() is called on a zero-size image ; the function allocates a non-empty output but fails while attempting to replic...