CVE-2026-59205

EUVD-2026-43746
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 31.35%
Affected Products (NVD)
VendorProductVersion
pythonpillow
𝑥
< 12.3.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
pillow
bookworm
postponed
bookworm (security)
vulnerable
bullseye
postponed
bullseye (security)
vulnerable
forky
12.3.0-1
fixed
sid
12.3.0-1
fixed
trixie
vulnerable
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pillow
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
pillow-python2
focal
needs-triage
jammy
dne
noble
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
python311-Pillow
suse enterprise desktop 15 SP7
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP4
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP5
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP6
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP7
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP4
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP5
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP6
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP7
9.5.0-150400.5.25.1
fixed
python311-Pillow-tk
suse enterprise desktop 15 SP7
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP4
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP5
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP6
9.5.0-150400.5.25.1
fixed
suse enterprise sap 15 SP7
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP4
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP5
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP6
9.5.0-150400.5.25.1
fixed
suse enterprise server 15 SP7
9.5.0-150400.5.25.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python-pillow
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
python-pillow-debuginfo
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python-pillow-debugsource
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python-pillow-devel
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
python-pillow-doc
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
python-pillow-sane
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
python-pillow-tk
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.20
fixed
python3-pillow
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python3-pillow-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python3-pillow-devel
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python3-pillow-tk
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
python3-pillow-tk-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.10
fixed
Common Weakness Enumeration
References
https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721
https://github.com/python-pillow/Pillow/pull/9715
https://github.com/python-pillow/Pillow/releases/tag/12.3.0
https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6
https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6