Skip to content
OpenAdvisories
High ALAS2023-2026-2013 7 CVEs

Important: python-pillow security update (Amazon Linux 2023)

Published Aug 3, 2026 · Updated Aug 4, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59205: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0. CVE-2026-59204: Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0. CVE-2026-59200: Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small file. This issue is fixed in version 12.3.0. CVE-2026-59199: Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0. CVE-2026-59198: Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0. CVE-2026-59197: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0. CVE-2026-54058: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2023 python-pillow-debuginfo 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python-pillow-debugsource 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python3-pillow 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python3-pillow-debuginfo 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python3-pillow-devel 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python3-pillow-tk 0:9.4.0-2.amzn2023.0.10
Amazon Linux · 2023 python3-pillow-tk-debuginfo 0:9.4.0-2.amzn2023.0.10

Vulnerabilities 7

  • High 8.7
    CVE-2026-59204

    Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantia…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 8.3
    CVE-2026-54058

    Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel a…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 8.2
    CVE-2026-59197

    Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before …

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59199

    Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). Thi…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59200

    Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59205

    Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Medium 6.5
    CVE-2026-59198

    Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

    Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This iss…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-54058.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59197.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59198.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59199.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59200.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59204.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59205.html