CVE-2026-54060

Published: Jul 6, 2026Modified: Jul 7, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.

Related CWEs

CWE-789

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (4)

https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst

Source: security-advisories@github.com

https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d

Source: security-advisories@github.com

https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2

Source: security-advisories@github.com

https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.