CVE-2026-59198 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

🗓️ 14 Jul 2026 16:07:56Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Pillow prior to twelve three may leak heap data via the image format run length encoding when saving mode one images.

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2026-59198	14 Jul 202616:07	–	cve
Cvelist	CVE-2026-59198 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images	14 Jul 202616:07	–	cvelist
EUVD	EUVD-2026-43752	14 Jul 202616:07	–	euvd
NVD	CVE-2026-59198	14 Jul 202616:17	–	nvd
Positive Technologies	PT-2026-58089	14 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-59198 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images	14 Jul 202616:07	–	vulnrichment

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59198.json
github	www.github.com/python-pillow/Pillow/commit/eada3cbd7fb9963ee90673fb7b5270124a0d5f4b
github	www.github.com/python-pillow/Pillow/pull/9709
github	www.github.com/python-pillow/Pillow/releases/tag/12.3.0
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59198

15 Jul 2026 02:21Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5