Vulnerability Description
Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Python | Pillow | >= 12.0.0, < 12.3.0 |
Related Weaknesses (CWE)
References
- https://github.com/python-pillow/Pillow/commit/03992618118b4a76b6163cd72ab5ecd68Patch
- https://github.com/python-pillow/Pillow/pull/9708Issue TrackingPatch
- https://github.com/python-pillow/Pillow/releases/tag/12.3.0Release Notes
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798ExploitVendor Advisory
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pg7v-jwj7-p798ExploitVendor Advisory
FAQ
What is CVE-2026-59203?
CVE-2026-59203 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file t...
How severe is CVE-2026-59203?
CVE-2026-59203 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-59203?
Check the references section above for vendor advisories and patch information. Affected products include: Python Pillow.