RHSA-2026:92639HighCVSS 7.5

Red Hat Security Advisory: python-pillow security update

Published
October 29, 2026
Last Modified
October 31, 2026

🔗 CVE IDs covered (10)

CVE-2026-96640 →CVE-2026-112391 →CVE-2026-112392 →CVE-2026-112397 →CVE-2026-112402 →CVE-2026-112405 →CVE-2026-112895 →CVE-2026-112406 →CVE-2026-112892 →CVE-2026-112894 →

📋 Description

CVE-2026-96640 — pillow: pillow: Denial of Service via duplicate page references in PDF files CVE-2026-112391 — pillow: Pillow: Denial of Service via unbounded recursion in PDF parser CVE-2026-112392 — pillow: pillow: Denial of Service via zero-size images in rank filters CVE-2026-112397 — pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images CVE-2026-112402 — pillow: pillow: Denial of service via double free during image transformation CVE-2026-112405 — pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() CVE-2026-112406 — pillow: pillow: Denial of Service via infinite loop during PDF page rewriting CVE-2026-112892 — pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder CVE-2026-112894 — pillow: pillow: Denial of Service via crafted multi-frame image conversion CVE-2026-112895 — pillow: pillow: Denial of service via crafted PDF during append operations

🎯 Affected products54

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-0:5.1.1-33.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debuginfo-0:5.1.1-33.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python-pillow-debugsource-0:5.1.1-33.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python3-pillow-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python3-pillow-0:5.1.1-33.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python3-pillow-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python3-pillow-0:5.1.1-33.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python3-pillow-0:5.1.1-33.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python3-pillow-debuginfo-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • python3-pillow-debuginfo-0:5.1.1-33.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python3-pillow-debuginfo-0:5.1.1-33.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • python3-pillow-debuginfo-0:5.1.1-33.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +24 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: --- CME Mitigation Guidance (2026-10-20) --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure. The highest-value action is to enforce recursion depth limits in PdfParser when reading nested PDF data structures during append operations: upgrade to Pillow 13.0.0 (or the fixed Python Pillow/Python3.11 Pillow/Rhoai/Odh Openvino Model Server Rhel/Rhelai3/Bootc Cuda Rhel/Rhelai3/Bootc Gaudi Rhel/Rhelai3/Bootc Rocm Rhel/Rhelai3/Disk Image Cuda Rhel/Python3X Pillow/Rhaiis/Vllm Spyre Rhel/Rhoai/Odh Kserve Storage Initializer Rhel/Rhoai/Odh Kserve Agent Rhel/Rhoai/Odh Kserve Controller Rhel/Rhoai/Odh Kserve Router Rhel/Rhoai/Odh Feature Server Rhel/Rhoai/Odh Trustyai Nemo Guardrails Server Rhel/Rhaiis/Vllm Tpu Rhel/Rhoai/Odh Training Cuda128 Torch29 Py312 Rhel/Rhoai/Odh Training Rocm64 Torch29 Py312 Rhel/Rhaiis/Vllm Cpu Rhel/Rhaiis/Vllm Neuron Rhel/Ansible Automation Platform 25/Lightspeed Chatbot Rhel/Openshift Lightspeed/Lightspeed Ocp Rag Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Vllm Gaudi Rhel/Python3.12 Pillow/Rhaii/Vllm Gaudi Rhel/Rhaii/Vllm Neuron Rhel/Rhaii/Vllm Tpu Rhel/Lightspeed Core/Lightspeed Stack Rhel/Rhoai/Odh Kserve Autogluon Server Rhel/Rhai Early Access/Docling Sdk Cuda Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhoai/Odh Llm D Kv Cache Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Llmcompressor Cuda Py312 Rhel/Ask Sre/Rhel Cla/Rlsapi Rhel/Rhaiis/Model Opt Cuda Rhel/Rhaiis/Vllm Cuda Rhel/Rhaiis/Vllm Rocm Rhel/Rhaii/Model Opt Cuda Rhel/Rhaii/Vllm Cpu Rhel/Rhaii/Vllm Cuda Rhel/Rhaii/Vllm Rocm Rhel/Rhaii/Vllm Spyre Rhel/Ansible Automation Platform/Automation Dashboard Rhel/Ansible Automation Platform 26/Hub Rhel/Ansible Automation Platform 26/Lightspeed Chatbot Rhel/Ansible Automation Platform 27/Hub Rhel/Ansible Automation Platform 27/Lightspeed Chatbot Rhel/Galaxy Ng/Automation Hub Container/Aap Rag Content/Ansible Chatbot Stack/Koku Report Emailer/Exploit Intelligence/Vulnerability Analysis Rhel/Insights Host Inventory/Google Lightspeed Agent/Lscore Deploy/Lightspeed Core/Rag Tool Cpu Rhel/Lightspeed Core/Rag Tool Cuda 12.9 Rhel/Lightspeed Services Ocp/Ocp Rules Rhel/Openshift Lightspeed Tech Preview/Lightspeed Rag Tool Rhel/Openshift Lightspeed/Lightspeed Service Api Rhel/Rhoai/Odh Caikit Tgis Serving Rhel/Rhoai/Odh Llama Stack Core Rhel/Rhoai/Odh Pipeline Runtime Pytorch Llmcompressor Cuda Py312 Rhel/Rhoai/Odh Automl Rhel/Rhoai/Odh Autorag Rhel/Rhoai/Odh Mlflow Rhel/Rhoai/Odh Pipeline Runtime Datascience Cpu Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch Rocm Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Cuda Py312 Rhel/Rhoai/Odh Pipeline Runtime Tensorflow Rocm Py312 Rhel/Rhoai/Odh Trustyai Garak Lls Provider Dsp Rhel/Rhoai/Odh Workbench Codeserver Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Datascience Cpu Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Cuda Py312 Rhel/Rhoai/Odh Workbench Jupyter Tensorflow Rocm Py312 Rhel/Rhoai/Odh Workbench Jupyter Trustyai Cpu Py312 Rhel/Rhai/Guidellm Rhel/Rhoai/Odh Ogx Core Rhel/Rhoai/Odh Th Torch Cpu Py312 Rhel/Rhoai/Odh Th Torch Cuda Py312 Rhel/Rhoai/Odh Th Torch Rocm Py312 Rhel/Quay/Quay Service Tool/Quay/Quay Rhel/Rhelai3/Bootc Aws Cuda Rhel/Rhelai3/Bootc Azure Cuda Rhel/Rhelai3/Bootc Azure Rocm Rhel/Rhelai3/Bootc Gcp Cuda Rhel builds), which set default max_nesting parameter to 900 instead of -1 in get_value() and read_indirect() to enforce recursion limits, closing all 2 injection vectors (deeply nested PDF arrays, deeply nested PDF dictionaries). Until patched, this is a concern on applications using Pillow to append images to existing, untrusted PDF files, so prevent untrusted users from submitting PDF files to applications executing image saves with PDF append enabled. As a compensating measure, configure service watchdogs and automatic restart policies such as systemd WatchdogSec and Restart to restart workers that terminate due to uncaught RecursionError exceptions. These controls limit blast radius and contain exploitation, but they do not fix the underlying unbounded recursion defect — apply the upstream patch to fully remediate. Highest-impact CME: CME-1204 Service Watchdog and Automatic Restart (systemd WatchdogSec/Restart) (medium) Workaround: --- CME Mitigation Guidance (2026-10-20) --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure. The highest-value action is to validate image dimensions and reject zero-width or zero-height inputs before invoking rank, median, minimum, or maximum filters in Pillow: upgrade to Pillow 13.0.0 (or the fixed Python Pillow/Python3.11 Pillow/Rhoai/Odh Openvino Model Server Rhel/Rhelai3/Bootc Cuda Rhel/Rhelai3/Bootc Gaudi Rhel/Rhelai3/Bootc Rocm Rhel/Rhelai3/Disk Image Cuda Rhel/Python3X Pillow/Rhaiis/Vllm Spyre Rhel/Rhoai/Odh Kserve Storage Initializer Rhel/Rhoai/Odh Kserve Agent Rhel/Rhoai/Odh Kserve Controller Rhel/Rhoai/Odh Kserve Router Rhel/Rhoai/Odh Feature Server Rhel/Rhoai/Odh Trustyai Nemo Guardrails Server Rhel/Rhaiis/Vllm Tpu Rhel/Rhoai/Odh Training Cuda128 Torch29 Py312 Rhel/Rhoai/Odh Training Rocm64 Torch29 Py312 Rhel/Rhaiis/Vllm Cpu Rhel/Rhaiis/Vllm Neuron Rhel/Ansible Automation Platform 25/Lightspeed Chatbot Rhel/Openshift Lightspeed/Lightspeed Ocp Rag Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Vllm Gaudi Rhel/Python3.12 Pillow/Rhaii/Vllm Gaudi Rhel/Rhaii/Vllm Neuron Rhel/Rhaii/Vllm Tpu Rhel/Lightspeed Core/Lightspeed Stack Rhel/Rhoai/Odh Kserve Autogluon Server Rhel/Rhai Early Access/Docling Sdk Cuda Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhoai/Odh Llm D Kv Cache Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Workbench Jupyter Pytorch Llmcompressor Cuda Py312 Rhel/Ask Sre/Rhel Cla/Rlsapi Rhel/Rhaiis/Model Opt Cuda Rhel/Rhaiis/Vllm Cuda Rhel/Rhaiis/Vllm Rocm Rhel/Rhaii/Model Opt Cuda Rhel/Rhaii/Vllm Cpu Rhel/Rhaii/Vllm Cuda Rhel/Rhaii/Vllm Rocm Rhel/Rhaii/Vllm Spyre Rhel/Ansible Automation Platform/Automation Dashboard Rhel/Ansible Automation Platform 26/Hub Rhel/Ansible Automation Platform 26/Lightspeed Chatbot Rhel/Ansible Automation Platform 27/Hub Rhel/Ansible Automation Platform 27/Lightspeed Chatbot Rhel/Galaxy Ng/Automation Hub Container/Aap Rag Content/Ansible Chatbot Stack/Koku Report Emailer/Exploit Intelligence/Vulnerability Analysis Rhel/Insights Host Inventory/Google Lightspeed Agent/Lscore Deploy/Lightspeed Core/Rag Tool Cpu Rhel/Lightspeed Core/Rag Tool Cuda 12.9 Rhel/Lightspeed Services Ocp/Ocp Rules Rhel/Openshift Lightspeed Tech Preview/Lightspeed Rag Tool Rhel/Openshift Lightspeed/Lightspeed Service Api Rhel/Rhoai/Odh Caikit Tgis Serving Rhel/Rhoai/Odh Llama Stack Core Rhel/Rhoai/Odh Pipeline Runtime Pytorch Llmcompressor Cuda Py312 Rhel/Rhoai/Odh Automl Rhel/Rhoai/Odh Autorag Rhel/Rhoai/Odh Mlflow Rhel/Rhoai/Odh Pipeline Runtime Datascience Cpu Py312 Rhel/Rhoai/Odh Pipeline Runtime Pytorch …

🔗 References (13)