{"id":"CVE-2026-59204","title":"Pillow: Pillow: Denial of Service via crafted JPEG2000 image (CVE-2026-59204)","summary":"A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-131","CWE-770","CWE-789"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","affected":["exploit_intelligence","lightspeed_core","openshift_lightspeed","ai_inference_server","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai","ai_inference_server 3.2","ai_inference_server 3.3","ai_inference_server 3.4","enterprise_linux_ai 3.3","openshift_ai 3.4","quay 3.10","quay 3.12","quay 3.15","quay 3.16","quay 3.9"],"patched":["ai_inference_server 3.2","ai_inference_server 3.3","ai_inference_server 3.4","enterprise_linux_ai 3.3","openshift_ai 3.4","quay 3.10","quay 3.12","quay 3.15","quay 3.16","quay 3.9"],"published":"2026-07-14","updated":"2026-09-21","sourceUpdated":"2026-09-21T16:39:54+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59204.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59204.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-59204"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500022"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59204"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59204"},{"url":"https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca"},{"url":"https://github.com/python-pillow/Pillow/pull/9704"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/12.3.0"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j"},{"url":"https://access.redhat.com/errata/RHSA-2026:61628"},{"url":"https://access.redhat.com/errata/RHSA-2026:61627"},{"url":"https://access.redhat.com/errata/RHSA-2026:61629"},{"url":"https://access.redhat.com/errata/RHSA-2026:59518"},{"url":"https://access.redhat.com/errata/RHSA-2026:69468"},{"url":"https://access.redhat.com/errata/RHSA-2026:69466"},{"url":"https://access.redhat.com/errata/RHSA-2026:69467"},{"url":"https://access.redhat.com/errata/RHSA-2026:69469"},{"url":"https://access.redhat.com/errata/RHSA-2026:69464"},{"url":"https://access.redhat.com/errata/RHSA-2026:62336"},{"url":"https://access.redhat.com/errata/RHSA-2026:62335"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"url":"https://access.redhat.com/errata/RHSA-2026:53520"},{"url":"https://access.redhat.com/errata/RHSA-2026:52968"},{"url":"https://access.redhat.com/errata/RHSA-2026:48933"},{"url":"https://access.redhat.com/errata/RHSA-2026:69255"},{"url":"https://access.redhat.com/errata/RHSA-2026:50931"},{"url":"https://github.com/python-pillow/Pillow"},{"url":"https://github.com/advisories/GHSA-vjc4-5qp5-m44j"}],"tags":["csaf","vex","red-hat","osv","pip","ghsa"],"epss":0.00393,"epssPercentile":0.33283,"aliases":["GHSA-vjc4-5qp5-m44j","BIT-pillow-2026-59204","PYSEC-2026-3496"],"ecosystem":"pip","ingestedAt":"2026-07-20T23:44:02.427Z","slug":"CVE-2026-59204","body":"## Overview\n\nA flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted JPEG2000 image file. Due to incorrect calculation of memory requirements for image tiles, processing this file can lead to excessive memory consumption, resulting in a denial of service (DoS) through out-of-memory failures.\n\n## Vendor advisories\n\n- **RHSA-2026:61628** · Red Hat · fixed in: Red Hat AI Inference Server 3.2 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:61628)\n- **RHSA-2026:61627** · Red Hat · fixed in: Red Hat AI Inference Server 3.2 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:61627)\n- **RHSA-2026:61629** · Red Hat · fixed in: Red Hat AI Inference Server 3.2 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:61629)\n- **RHSA-2026:59518** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-08-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:59518)\n- **RHSA-2026:69468** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69468)\n- **RHSA-2026:69466** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69466)\n- **RHSA-2026:69467** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69467)\n- **RHSA-2026:69469** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69469)\n- **RHSA-2026:69464** · Red Hat · fixed in: Red Hat AI Inference Server 3.4 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69464)\n- **RHSA-2026:62336** · Red Hat · fixed in: Red Hat Enterprise Linux AI 3.3 · released 2026-09-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:62336)\n- **RHSA-2026:62335** · Red Hat · fixed in: Red Hat Enterprise Linux AI 3.3 · released 2026-09-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:62335)\n- **Red Hat VEX** · Important · affected: Exploit Intelligence, Lightspeed Core, OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Exploit Intelligence, Lightspeed Core, OpenShift Lightspeed, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59204.json)\n- **RHSA-2026:60520** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:60520)\n- **RHSA-2026:53520** · Red Hat · fixed in: Red Hat Quay 3.10 · released 2026-08-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:53520)\n- **RHSA-2026:52968** · Red Hat · fixed in: Red Hat Quay 3.12 · released 2026-08-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:52968)\n- **RHSA-2026:48933** · Red Hat · fixed in: Red Hat Quay 3.15 · released 2026-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2026:48933)\n- **RHSA-2026:69255** · Red Hat · fixed in: Red Hat Quay 3.16 · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69255)\n- **RHSA-2026:50931** · Red Hat · fixed in: Red Hat Quay 3.9 · released 2026-08-05 · [advisory](https://access.redhat.com/errata/RHSA-2026:50931)\n\n**Pillow: Pillow: Denial of Service via crafted JPEG2000 image** — rated Important by Red Hat. Released 2026-07-14, updated 2026-09-21.\n\nAffected:\n\n- Exploit Intelligence\n- Lightspeed Core\n- OpenShift Lightspeed\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nFixed:\n\n- Red Hat AI Inference Server 3.2\n- Red Hat AI Inference Server 3.3\n- Red Hat AI Inference Server 3.4\n- Red Hat Enterprise Linux AI 3.3\n- Red Hat OpenShift AI 3.4\n- Red Hat Quay 3.10\n- Red Hat Quay 3.12\n- Red Hat Quay 3.15\n- Red Hat Quay 3.16\n- Red Hat Quay 3.9\n\nNo fix planned:\n\n- Red Hat AI Inference Server\n- Exploit Intelligence\n- Lightspeed Core\n- OpenShift Lightspeed\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat Enterprise Linux AI 3.3\n- Red Hat OpenShift AI 3.4\n- Red Hat Quay 3.10\n- Red Hat Quay 3.12\n- Red Hat Quay 3.15\n- Red Hat Quay 3.16\n- Red Hat Quay 3.9\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux 7\n\n## Remediation\n\nFor more information visit https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61628\nFor more information visit https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61627\nFor more information visit https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/errata/RHSA-2026:61629\n\nWorkarounds / mitigations:\n\n- If the application does not need JPEG2000 support, block .jp2, .j2k, .jpf, and .jpx uploads at the input layer.\n\nFor services that do process JPEG2000, set memory limits on the process or container (LimitAS= in systemd, or memory limits in Kubernetes/Podman) so a crafted image can only crash the worker, not the whole host. Add automatic restarts (Restart=always in systemd, or container restart policies) so the service recovers from OOM kills without someone having to intervene.\n\n## Package advisory (CVE-2026-59204)\n\nAffected packages:\n\n- `pillow >= 8.2.0, < 12.3.0`\n\nPatched in:\n\n- `pillow 12.3.0`\n\nSource: https://osv.dev/vulnerability/GHSA-vjc4-5qp5-m44j","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201829,"id":"CVE-2026-59204","ts":1789399742624,"field":"cvss","old":null,"new":"7.5"},{"seq":200559,"id":"CVE-2026-59204","ts":1789397411778,"field":"cvss","old":"7.5","new":null},{"seq":198476,"id":"CVE-2026-59204","ts":1789392001066,"field":"cvss","old":null,"new":"7.5"},{"seq":196269,"id":"CVE-2026-59204","ts":1789383611613,"field":"cvss","old":"7.5","new":null},{"seq":195198,"id":"CVE-2026-59204","ts":1789380496780,"field":"cvss","old":null,"new":"7.5"},{"seq":193985,"id":"CVE-2026-59204","ts":1789378551539,"field":"cvss","old":"7.5","new":null},{"seq":192772,"id":"CVE-2026-59204","ts":1789376425707,"field":"cvss","old":null,"new":"7.5"},{"seq":191559,"id":"CVE-2026-59204","ts":1789373454474,"field":"cvss","old":"7.5","new":null},{"seq":190344,"id":"CVE-2026-59204","ts":1789369336888,"field":"cvss","old":null,"new":"7.5"},{"seq":189131,"id":"CVE-2026-59204","ts":1789368282560,"field":"cvss","old":"7.5","new":null},{"seq":187914,"id":"CVE-2026-59204","ts":1789365161622,"field":"cvss","old":null,"new":"7.5"},{"seq":186701,"id":"CVE-2026-59204","ts":1789363305955,"field":"cvss","old":"7.5","new":null},{"seq":185487,"id":"CVE-2026-59204","ts":1789361122656,"field":"cvss","old":null,"new":"7.5"},{"seq":184274,"id":"CVE-2026-59204","ts":1789358180976,"field":"cvss","old":"7.5","new":null},{"seq":182525,"id":"CVE-2026-59204","ts":1789354238189,"field":"cvss","old":null,"new":"7.5"},{"seq":181318,"id":"CVE-2026-59204","ts":1789353153298,"field":"cvss","old":"7.5","new":null},{"seq":180111,"id":"CVE-2026-59204","ts":1789350186916,"field":"cvss","old":null,"new":"7.5"},{"seq":178904,"id":"CVE-2026-59204","ts":1789348122551,"field":"cvss","old":"7.5","new":null},{"seq":177697,"id":"CVE-2026-59204","ts":1789346293238,"field":"cvss","old":null,"new":"7.5"},{"seq":176490,"id":"CVE-2026-59204","ts":1789343035504,"field":"cvss","old":"7.5","new":null},{"seq":174607,"id":"CVE-2026-59204","ts":1789334800876,"field":"cvss","old":null,"new":"7.5"},{"seq":173402,"id":"CVE-2026-59204","ts":1789333520780,"field":"cvss","old":"7.5","new":null},{"seq":172216,"id":"CVE-2026-59204","ts":1789331030317,"field":"cvss","old":null,"new":"7.5"},{"seq":171030,"id":"CVE-2026-59204","ts":1789328646064,"field":"cvss","old":"7.5","new":null},{"seq":169825,"id":"CVE-2026-59204","ts":1789327069635,"field":"cvss","old":null,"new":"7.5"},{"seq":168620,"id":"CVE-2026-59204","ts":1789323688563,"field":"cvss","old":"7.5","new":null},{"seq":167415,"id":"CVE-2026-59204","ts":1789319600415,"field":"cvss","old":null,"new":"7.5"},{"seq":166210,"id":"CVE-2026-59204","ts":1789318592124,"field":"cvss","old":"7.5","new":null},{"seq":165005,"id":"CVE-2026-59204","ts":1789315720797,"field":"cvss","old":null,"new":"7.5"},{"seq":163800,"id":"CVE-2026-59204","ts":1789313481926,"field":"cvss","old":"7.5","new":null},{"seq":162595,"id":"CVE-2026-59204","ts":1789311826637,"field":"cvss","old":null,"new":"7.5"},{"seq":161390,"id":"CVE-2026-59204","ts":1789308551669,"field":"cvss","old":"7.5","new":null},{"seq":160895,"id":"CVE-2026-59204","ts":1789304505105,"field":"cvss","old":null,"new":"7.5"},{"seq":160442,"id":"CVE-2026-59204","ts":1789304012541,"field":"cvss","old":"7.5","new":null},{"seq":159503,"id":"CVE-2026-59204","ts":1789300417011,"field":"cvss","old":null,"new":"7.5"},{"seq":158733,"id":"CVE-2026-59204","ts":1789299521512,"field":"cvss","old":"7.5","new":null},{"seq":157697,"id":"CVE-2026-59204","ts":1789296586464,"field":"cvss","old":null,"new":"7.5"},{"seq":156492,"id":"CVE-2026-59204","ts":1789294611965,"field":"cvss","old":"7.5","new":null},{"seq":155287,"id":"CVE-2026-59204","ts":1789292821707,"field":"cvss","old":null,"new":"7.5"},{"seq":154082,"id":"CVE-2026-59204","ts":1789289626124,"field":"cvss","old":"7.5","new":null},{"seq":152732,"id":"CVE-2026-59204","ts":1789281526296,"field":"cvss","old":null,"new":"7.5"},{"seq":152372,"id":"CVE-2026-59204","ts":1789281129693,"field":"cvss","old":"7.5","new":null},{"seq":151333,"id":"CVE-2026-59204","ts":1789277551124,"field":"cvss","old":null,"new":"7.5"},{"seq":150294,"id":"CVE-2026-59204","ts":1789276113136,"field":"cvss","old":"7.5","new":null},{"seq":149261,"id":"CVE-2026-59204","ts":1789273759569,"field":"cvss","old":null,"new":"7.5"},{"seq":148228,"id":"CVE-2026-59204","ts":1789271153990,"field":"cvss","old":"7.5","new":null},{"seq":146263,"id":"CVE-2026-59204","ts":1789269288428,"field":"cvss","old":null,"new":"7.5"},{"seq":142875,"id":"CVE-2026-59204","ts":1789261389552,"field":"cvss","old":"7.5","new":null},{"seq":141706,"id":"CVE-2026-59204","ts":1789258756183,"field":"cvss","old":null,"new":"7.5"},{"seq":140547,"id":"CVE-2026-59204","ts":1789256593794,"field":"cvss","old":"7.5","new":null}]}