Search: CVE-2026-112405

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-112405Pillow · NULL Pointer Dereference High8.7EPSS 0.5%2026-10-19CVE Database V5CVE-2026-112405 A NULL pointer dereference vulnerability exists in the python-pillow Pillow library's Image.merge() function when processing certain single-band images of mode 'I' or 'F'. The function skips validation for band 0, leading to a crash when a crafted file is loaded via the IPTC plugin. This causes a hard crash of the process, not a catchable Python exception. EPSS 0.5%Vulnerability python-pillow CWE-476 #brew-aider-cve-2026-112405 #homebrew	CVE Database V5	2026-10-19

Page 1 of 1 · 3 duplicate CVE records merged