CVE-2026-112893 Pillow: Invalid free in FreeType glyph rendering when a stroker is active
An attacker can cause memory corruption or crash by supplying a malformed font to applications using Pillow for text rendering with stroke width.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-112893?
CVE-2026-112893 is a high-severity use after free vulnerability in Python Pillow, published on 19 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.
Which versions are affected by CVE-2026-112893?
3 open source packages ship an affected version, including pillow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pillow Bitnami | From 10.0.0 | 13.0.0 |
pillow PyPI | From 10.0.0 | 13.0.0 |
pillow PyPI | From 10.0.0 | 13.0.0 |
Products include Python Pillow.
How do I fix CVE-2026-112893?
Upgrade pillow to 13.0.0 or later.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-112893 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-112893 exists.
Other vulnerabilities in Python Pillow
Sources
Also known as BIT-pillow-2026-112893, DEBIAN-CVE-2026-112893, ECHO-b907-64f0-b646, GHSA-j4m9-6w36-pw47, ROOT-APP-PYPI-CVE-2026-112893, UBUNTU-CVE-2026-112893.