TI-2026-42349 CVE-2026-59204 · GHSA-vjc4-5qp5-m44j
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
Priority HIGH 77
Pillow is a Python imaging library.
RHSA-2026:59518
Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)
Released 2026-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
Fixes 12 records
TI-2026-42350 CVE-2026-59205 · GHSA-9hw9-ch79-4vh6
Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-42347 CVE-2026-59200 · GHSA-jjj6-mw9f-p565
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-42346 CVE-2026-59199 · GHSA-6r8x-57c9-28j4
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39958 CVE-2026-55380 · GHSA-phj9-mv4w-65pm
Pillow GdImageFile decompression bomb protection bypass
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39957 CVE-2026-55379 · GHSA-45hq-cxwh-f6vc
Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb…
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-38994 CVE-2026-54060 · GHSA-5x94-69rx-g8h2
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-38992 CVE-2026-54058 · GHSA-62p4-gmf7-7g93
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
Priority HIGH 69
Pillow is a Python imaging library.
TI-2026-42699 CVE-2026-59885 · GHSA-8ppf-4f7h-5ppj
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
Priority MEDIUM 40
pyasn1 is a generic ASN.1 library for Python.
TI-2026-42698 CVE-2026-59884 · GHSA-m4p7-r5rc-7g4j
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
Priority MEDIUM 40
pyasn1 is a generic ASN.1 library for Python.
TI-2026-42700 CVE-2026-59886 · GHSA-hm4w-wwcw-mr6r
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
Priority LOW 39
pyasn1 is a generic ASN.1 library for Python.
TI-2026-27214 CVE-2026-34993 · GHSA-jg22-mg44-37j8
AIOHTTP Vulnerable to Deserialization of Untrusted Data
Priority LOW 31
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.