Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:16:07 +0000 CVE-2026-59198 — Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images https://cve.radiocsirt.org/vuln/cve-2026-59198 <p><strong>Affected:</strong> python-pillow Pillow</p> <p>Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow&#39;s TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0.</p> <p><strong>Affected:</strong> python-pillow Pillow</p> <p>Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow&#39;s TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-59198