CVE-2026-59203 | Pillow is a Python imaging library. From 12.0.0 through 12.2… | CVSS 5.3 MEDIUM

Description

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.

Metadata

CVE ID: CVE-2026-59203
State: PUBLISHED
Assigner: GitHub_M
Reserved: 2026-07-02 21:05 UTC
Published: 2026-07-14 15:43 UTC
Last updated: 2026-07-14 15:49 UTC
Primary CWE: CWE-835
CWE-835: Loop with Unreachable Exit Condition ('Infinite Loo…
Vendor / Product: python-pillow / Pillow
Sources: cve.org · NVD

Severity & Metrics

5.3 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products (1)

Vendor	Product	Platform	Versions
python-pillow	Pillow	—	>= 12.0.0, < 12.3.0

Weakness (CWE)

CWE	Source	Description
CWE-835	cna	CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.3	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References (4)

https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798 https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798
https://github.com/python-pillow/Pillow/pull/9708 https://github.com/python-pillow/Pillow/pull/9708
https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd684133b83 https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd684133b83
https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/releases/tag/12.3.0