Skip to content
Threat Feed
Subscribe

Product

Pillow 12.0.0

1 brief RSS
medium threat

Denial-of-Service Vulnerability in Pillow EPS Parser (CVE-2026-59203)

A denial-of-service vulnerability, CVE-2026-59203, exists in the Python imaging library Pillow, affecting versions 12.0.0 through 12.2.0, where a specially crafted EPS file with a negative byte count in the `%%BeginBinary` directive can cause an infinite loop and resource exhaustion when processed by the `Image.open()` function, leading to application unresponsiveness.

exploited Pillow 12.0.0 +2 denial-of-service vulnerability python pillow
1t 1c