Red Hat Security Advisory

RHSA-2026:94631

GuideLLM 3.5.1

Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/guidellm-rhel9

Fixes 25 records

TI-2026-76627 CVE-2026-112896 · GHSA-pchr-8j38-3x4p

Out-of-bounds read in Pillow TIFF encoder ColorMap handling

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00475 Published 2026-10-19 Partial fix · 13.0.0 CWE-125

TI-2026-76625 CVE-2026-112894 · GHSA-jg86-v3jv-hrpm

Quadratic-time denial of service in Pillow PDF save_all

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00594 Published 2026-10-19 Partial fix · 13.0.0 CWE-407

TI-2026-76605 CVE-2026-112405 · GHSA-cp9v-662q-vvx9

NULL pointer dereference in Pillow's Image.merge function

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00594 Published 2026-10-19 Partial fix · 13.0.0 CWE-476

TI-2026-76604 CVE-2026-112404 · GHSA-c6hw-5grf-ff96

Out-of-bounds read in Pillow TIFF decoding leaks heap memory

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00444 Published 2026-10-19 Partial fix · 13.0.0 CWE-126

TI-2026-76602 CVE-2026-112402 · GHSA-7mwm-ghpf-9vrm

Double free in Pillow ImagingScaleAffine on allocation failure

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00594 Published 2026-10-19 Partial fix · 13.0.0 CWE-416

TI-2026-76600 CVE-2026-112400 · GHSA-65qm-jvmh-6pqg

GIF seek in Pillow keeps rejected size, allowing denial of service

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00594 Published 2026-10-19 Partial fix · 13.0.0 CWE-400

TI-2026-76599 CVE-2026-112399 · GHSA-5xm2-6676-qcp9

Excessive memory use in Pillow APNG handling enables denial of service

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00529 Published 2026-10-19 Partial fix · 13.0.0 CWE-789

TI-2026-76597 CVE-2026-112397 · GHSA-58r4-6rv3-gfh8

Out-of-bounds memory access in Pillow morphology on zero-width images

HIGH 77

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00573 Published 2026-10-19 Partial fix · 13.0.0 CWE-787

TI-2026-79005 CVE-2026-96640 · GHSA-mrfp-p49p-3hf2

Resource exhaustion in Pillow PDF append via malformed page tree

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00604 Published 2026-10-21 Partial fix · 13.0.0 CWE-400

TI-2026-76624 CVE-2026-112893 · GHSA-j4m9-6w36-pw47

Invalid free in Pillow FreeType rendering when a stroker is active

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00549 Published 2026-10-19 Partial fix · 13.0.0 CWE-457

TI-2026-76592 CVE-2026-112392 · GHSA-27h8-gf7j-v5hc

NULL dereference in Pillow rank filters crashes on zero-size images

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00593 Published 2026-10-19 Partial fix · 13.0.0 CWE-476

TI-2026-76590 CVE-2026-112390 · GHSA-22hg-r758-rrw9

Infinite loop in Pillow MIC frame counting with embedded TIFF

HIGH 75

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00593 Published 2026-10-19 Partial fix · 13.0.0 CWE-835

TI-2026-66136 CVE-2026-104851 · GHSA-27vj-qcqg-25rc

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

HIGH 73

fsspec is a specification and Python implementation framework for filesystem interfaces.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00475 Published 2026-10-02 Partial fix · 2026.6.0 CWE-1336

TI-2026-76628 CVE-2026-112897 · GHSA-q45j-58j2-45rg

Pillow returns uninitialized memory as TIFF pixels

HIGH 71

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00479 Published 2026-10-19 Partial fix · 13.0.0 CWE-908

TI-2026-78997 CVE-2026-96644 · GHSA-9v9v-9qvf-h2hj

Heap over-read in Pillow WMF and EMF rendering on Windows

MEDIUM 64

Pillow is a Python imaging library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00384 Published 2026-10-21 Partial fix · 13.0.0 CWE-125

TI-2026-76862 CVE-2026-112940 · GHSA-v4x8-3wr5-3wq8

Symlink race in filelock ReadWriteLock lets attackers overwrite files

MEDIUM 64

filelock is a platform-independent file lock for Python.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0019 Published 2026-10-20 Partial fix · 4.2.1 CWE-363

TI-2026-76626 CVE-2026-112895 · GHSA-p4wg-p73j-c528

Uncontrolled recursion in Pillow PDF parser causes denial of service

MEDIUM 44

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00594 Published 2026-10-19 Partial fix · 13.0.0 CWE-674

TI-2026-76606 CVE-2026-112406 · GHSA-f2g6-542v-9j58

Infinite loop in Pillow PdfParser.rewrite_pages on cyclic page tree

MEDIUM 44

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00573 Published 2026-10-19 Partial fix · 13.0.0 CWE-835

TI-2026-76527 CVE-2026-111064 · GHSA-5wr8-gcqf-gqf3

Missing initial request timeout in aiohttp server

MEDIUM 42

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00399 Published 2026-10-19 Partial fix · 3.14.4 CWE-770

TI-2026-76623 CVE-2026-112892 · GHSA-gg2r-wvfm-q9rx

Unbounded memory expansion in Pillow MSP RLE decoder

LOW 38

Pillow is a Python imaging library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00503 Published 2026-10-19 Partial fix · 13.0.0 CWE-409

TI-2026-78996 CVE-2026-96643 · GHSA-g4qv-2jxx-769h

Pillow PNG eXIf chunk makes EXIF parsing run in quadratic time

LOW 37

Pillow is a Python imaging library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00373 Published 2026-10-21 Partial fix · 13.0.0 CWE-407

TI-2026-78998 CVE-2026-96778 · GHSA-g7cr-3p24-7wf7

Heap buffer overflow in Pillow JPEG encoder when writing comments

LOW 36

Pillow is a Python imaging library.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00454 Published 2026-10-21 Partial fix · 13.0.0 CWE-787

TI-2026-76529 CVE-2026-111066 · GHSA-9xw5-w5jj-pvcg

File descriptor exhaustion in AIOHTTP multipart request processing

LOW 36

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00412 Published 2026-10-19 Partial fix · 3.14.4 CWE-400

TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq

Red Hat system CA store trusts weak eMudhra intermediate certificates

LOW 32

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0031 Published 2026-10-21 Partial fix · 2026.2.92_v9.0.319-100.3.el10_2, 2026.2.92_v9.0.319-100.3.el10_0 +138 CWE-295

TI-2026-76591 CVE-2026-112391 · GHSA-254f-3936-288h

Unbounded recursion in Pillow PdfParser lets attackers crash workers

LOW 29

Pillow is a Python imaging library.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00581 Published 2026-10-19 Partial fix · 13.0.0 CWE-835