Security Advisory

CVE-2026-59205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-14 15:48:39

Last updated 2026-07-14 17:31:36

Assigner GitHub_M

CVSS score 7.5

State PUBLISHED

Description

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.

← Browse all CVEs View on cve.org ↗