Skip to content
OpenAdvisories
High USN-8999-1 11 CVEs

pillow vulnerabilities

Published Nov 4, 2026 · Updated Nov 5, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Pillow incorrectly handled map stride values
when loading certain McIdas AREA images. An attacker could possibly
use this issue to obtain sensitive information or cause a denial of
service. (CVE-2026-54058)

It was discovered that Pillow did not properly check for decompression
bombs when processing font files. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-54059, CVE-2026-54060, CVE-2026-55379)

It was discovered that Pillow did not properly check for decompression
bombs when loading GD image files. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-55380)

It was discovered that Pillow incorrectly validated filter sizes in
the rank filter implementation. An attacker could possibly use this
issue to cause Pillow to crash or execute arbitrary code.
(CVE-2026-59197)

It was discovered that Pillow incorrectly handled image coordinate
calculations. An attacker could possibly use this issue to cause
Pillow to crash. (CVE-2026-59199)

It was discovered that Pillow did not properly limit the size of
decompressed PDF stream data. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-59200)

It was discovered that Pillow incorrectly parsed EPS files containing
a negative byte count in the BeginBinary directive. An attacker could
possibly use this issue to cause Pillow to hang, resulting in a denial
of service. This issue only affected Ubuntu 26.04 LTS.
(CVE-2026-59203)

It was discovered that Pillow incorrectly accumulated JPEG2000 tile
component widths. An attacker could possibly use this issue to cause
Pillow to consume excessive memory, resulting in a denial of service.
(CVE-2026-59204)

It was discovered that Pillow incorrectly validated image mode
compatibility in color management transforms. An attacker could
possibly use this issue to cause Pillow to crash or execute arbitrary
code. (CVE-2026-59205)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS pillow 9.0.1-1ubuntu0.6
Ubuntu · 24.04 LTS 24.04:LTS pillow 10.2.0-1ubuntu1.4
Ubuntu · 26.04 LTS 26.04:LTS pillow 12.1.1-2ubuntu1.4

Vulnerabilities 11

  • High 8.7
    CVE-2026-59204

    Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantia…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 8.3
    CVE-2026-54058

    Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel a…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 8.2
    CVE-2026-59197

    Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before …

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-54059

    Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF fo…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-54060

    Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessi…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-55379

    Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing P…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-55380

    Pillow GdImageFile decompression bomb protection bypass

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger ex…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59199

    Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). Thi…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59200

    Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-59205

    Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI
  • Medium 5.3
    CVE-2026-59203

    Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

    Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directiv…

    python-pillow Pillow open-webui pillow Debian Ubuntu Wolfi PyPI

References

  • report
    https://ubuntu.com/security/CVE-2026-54058
  • report
    https://ubuntu.com/security/CVE-2026-54059
  • report
    https://ubuntu.com/security/CVE-2026-54060
  • report
    https://ubuntu.com/security/CVE-2026-55379
  • report
    https://ubuntu.com/security/CVE-2026-55380
  • report
    https://ubuntu.com/security/CVE-2026-59197
  • report
    https://ubuntu.com/security/CVE-2026-59199
  • report
    https://ubuntu.com/security/CVE-2026-59200
  • report
    https://ubuntu.com/security/CVE-2026-59203
  • report
    https://ubuntu.com/security/CVE-2026-59204
  • report
    https://ubuntu.com/security/CVE-2026-59205