PT-2026-58089

🗓️ 23 Jun 2026 00:00:00Reported by Positive TechnologiesType

Pillow Targa run length encoder could read past the packed row buffer for mode one images; fixed in 12.3.0.

Reporter	Title	Published	Views	Family All 933
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205	29 Sep 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	26 Aug 202613:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for July 2026	31 Jul 202611:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	29 Sep 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale	29 Sep 202607:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pillow affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	31 Aug 202615:32	–	ibm
attackerkb	CVE-2026-54058	14 Jul 202616:27	–	attackerkb

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
ubuntu	www.ubuntu.com/security/notices/USN-8690-1
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-fj7v-r99m-22gq
suse	www.suse.com/security/cve/CVE-2026-54060
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54059
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59199
osv	www.osv.dev/vulnerability/SUSE-SU-2026:3268-1
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-59198
bugzilla	www.bugzilla.suse.com/1271425
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2026-59198

01 Sep 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 48.3 - 8.7

CVSS 3.18.2 - 9.1

EPSS0.00521

SSVC