CVE-2026-59199

🗓️ 14 Jul 2026 15:42:15Reported by GitHub_MType

Pillow (Python imaging library) prior to 12.3.0 is affected by a heap out-of-bounds write in public image coordinate APIs when coordinates near signed 32-bit limits are provided to Image.paste(), Image.crop(), or Image.alpha_composite(). The issue...

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2026-59199 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow	14 Jul 202615:42	–	cvelist
EUVD	EUVD-2026-43739	14 Jul 202615:42	–	euvd
NVD	CVE-2026-59199	14 Jul 202616:17	–	nvd
OSV	CVE-2026-59199 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow	14 Jul 202615:42	–	osv
Positive Technologies	PT-2026-58090	14 Jul 202600:00	–	ptsecurity

NVD

Vulners

Node

python pillowRange<12.3.0

[
  {
    "vendor": "python-pillow",
    "product": "Pillow",
    "versions": [
      {
        "version": "< 12.3.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/python-pillow/Pillow/pull/9703
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4
github	www.github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b
github	www.github.com/python-pillow/Pillow/releases/tag/12.3.0

14 Jul 2026 20:18Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5