7.5
Élevée
CVE-2026-59199 Pillow is a Python imaging library
Description
Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pillow 12.3 | premières → < 12.3.0 | 12.3.0 |
Autres CVE de Pillow
Les 60 CVE de Pillow →
CVE-2026-112902
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
8.3
Élevée
CVE-2026-112899
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
6.3
Moyenne
CVE-2026-114501
Pillow is a Python imaging library
6.3
Moyenne
CVE-2026-96639
Pillow is a Python imaging library
9.8
Critique