Security Advisory

CVE-2026-59203

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-14 15:43:58

Last updated 2026-07-15 13:52:17

Assigner GitHub_M

CVSS score 5.3

State PUBLISHED

Description

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.

← Browse all CVEs View on cve.org ↗