Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:54:36 +0000 CVE-2026-59204 — Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service https://cve.radiocsirt.org/vuln/cve-2026-59204 <p><strong>Affected:</strong> python-pillow Pillow</p> <p>Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.</p> <p><strong>Affected:</strong> python-pillow Pillow</p> <p>Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-59204