{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-59205", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-02T21:05:02.924Z", "datePublished": "2026-07-14T15:48:39.962Z", "dateUpdated": "2026-07-14T17:31:36.064Z"}, "containers": {"cna": {"title": "Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch", "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "lang": "en", "description": "CWE-787: Out-of-bounds Write", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6"}, {"name": "https://github.com/python-pillow/Pillow/pull/9715", "tags": ["x_refsource_MISC"], "url": "https://github.com/python-pillow/Pillow/pull/9715"}, {"name": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721", "tags": ["x_refsource_MISC"], "url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721"}, {"name": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0"}], "affected": [{"vendor": "python-pillow", "product": "Pillow", "versions": [{"version": "< 12.3.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-14T15:48:39.962Z"}, "descriptions": [{"lang": "en", "value": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0."}], "source": {"advisory": "GHSA-9hw9-ch79-4vh6", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-14T17:30:37.376489Z", "id": "CVE-2026-59205", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T17:31:36.064Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-59205", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-14T17:30:37.376489Z"}}}], "references": [{"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T17:30:28.781Z"}}], "cna": {"title": "Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch", "source": {"advisory": "GHSA-9hw9-ch79-4vh6", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "python-pillow", "product": "Pillow", "versions": [{"status": "affected", "version": "< 12.3.0"}]}], "references": [{"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "name": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/python-pillow/Pillow/pull/9715", "name": "https://github.com/python-pillow/Pillow/pull/9715", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721", "name": "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "name": "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-14T15:48:39.962Z"}}}, "cveMetadata": {"cveId": "CVE-2026-59205", "state": "PUBLISHED", "dateUpdated": "2026-07-14T17:31:36.064Z", "dateReserved": "2026-07-02T21:05:02.924Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-14T15:48:39.962Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,12.3.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Pillow", "source": "cna", "vendor": "python-pillow"}, "product": "pillow", "vendor": "python-pillow"}], "created": "2026-07-14T17:45:03.844134+00:00", "updated": "2026-07-14T17:45:03.844159+00:00", "vendors": ["python-pillow", "python-pillow$PRODUCT$pillow"]}