Beveiligingsadvies

CVE-2026-59205

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-14 15:48:39
Laatst bijgewerkt 2026-07-14 17:31:36
Toegewezen door GitHub_M
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.