Pillow Library Vulnerability in Python Imaging Software
CVE-2026-59203

5.3MEDIUM

Key Information:

Vendor: Python-pillow
Status: Pillow
Vendor: CVE Published:; 14 July 2026

🔔 Create Python-pillow Vulnerability Alert

What is CVE-2026-59203?

The Pillow library, a popular Python imaging tool, contains a vulnerability in its EPS parser found in the PIL/EpsImagePlugin.py. Versions 12.0.0 through 12.2.0 improperly handle a negative byte count in the %%BeginBinary directive. This mismanagement allows a specially crafted EPS file to cause the Image.open() function to enter an infinite loop, repeatedly seeking backwards and parsing the same directive. This vulnerability is resolved in version 12.3.0, ensuring safer and more reliable image processing.