Memory-safety vulnerabilities in image decoding (Pillow)
A crafted image uploaded or imported into a project could trigger memory-safety bugs in the image library DocAI Fabric uses to open page images. Fixed in release 2026.10.22-1.
- Published
- Severity
- Critical
- CVE
- CVE-2026-112403CVE-2026-112395CVE-2026-112404CVE-2026-112897CVE-2026-112896CVE-2026-112397CVE-2026-112895CVE-2026-112400CVE-2026-112899
| Product | Affected | Fixed in | What to do |
|---|---|---|---|
| DocAI Fabric cloud (US and Australia) | Releases before 2026.10.22-1 | 2026.10.22-1, deployed 2026-10-22 | Nothing. The fix is deployed. |
| Self-hosted image | Images before 2026.10.22-1 | 2026.10.22-1, published 2026-10-22 | Update the image to 2026.10.26-1 or later, which also fixes DAF-SA-2026-002 and DAF-SA-2026-003. |
Description
DocAI Fabric opens every uploaded or imported page image with Pillow, an open-source imaging library, in the application container. This includes files uploaded in the application or through the API and attachments imported from email.
Pillow versions before 13.0.0 contain nine vulnerabilities, fixed by the Pillow project in 13.0.0:
- a heap buffer overflow in the JPEG decoder (CVE-2026-112403);
- out-of-bounds reads in the TIFF decoders and encoder (CVE-2026-112395, CVE-2026-112404, CVE-2026-112897, CVE-2026-112896) and in the morphology module (CVE-2026-112397);
- unbounded recursion when reading a PDF page tree (CVE-2026-112895);
- bypasses of the decompression-bomb limit for GIF and EPS images (CVE-2026-112400, CVE-2026-112899).
Uploading a document needs upload access to a project; on the cloud service, anyone who signs up has it in their own tenant. Where a project imports from email, anyone who can send mail to that mailbox can submit an image, with no account, unless the connector restricts senders. The most severe of these bugs is a memory corruption that could lead to code execution in the application container; the others could disclose memory or exhaust resources.
Fix
Release 2026.10.22-1 updates Pillow to 13.0.0.
Workarounds
None. Update the image.
References
- Pillow 13.0.0 release notes: https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html