{ "threat_severity" : "Important", "public_date" : "2026-07-14T16:09:05Z", "bugzilla" : { "description" : "Pillow: Pillow: Denial of service via crafted PDF stream", "id" : "2500060", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2500060" }, "cvss3" : { "cvss3_base_score" : "7.5", "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status" : "verified" }, "cwe" : "CWE-409", "details" : [ "Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small file. This issue is fixed in version 12.3.0.", "A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit a vulnerability in the PdfParser.PdfStream.decode() function when processing a crafted FlateDecode PDF stream. By providing a specially designed PDF file, the attacker could cause the application to exhaust available memory, leading to a denial of service (DoS)." ], "statement" : "The impact is limited to denial of service via memory exhaustion. A small crafted PDF input can force unbounded decompression, but this does not lead to code execution or information disclosure.", "affected_release" : [ { "product_name" : "Red Hat AI Inference Server 3.3", "release_date" : "2026-08-25T00:00:00Z", "advisory" : "RHSA-2026:59518", "cpe" : "cpe:/a:redhat:ai_inference_server:3.3::el9", "package" : "rhaiis/model-opt-cuda-rhel9:1787601159" }, { "product_name" : "Red Hat Enterprise Linux AI 3.3", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:62335", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9", "package" : "rhelai3/disk-image-cuda-rhel9:1788290314" }, { "product_name" : "Red Hat Enterprise Linux AI 3.3", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:62336", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9", "package" : "rhelai3/bootc-aws-cuda-rhel9:1788273908" }, { "product_name" : "Red Hat Enterprise Linux AI 3.3", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:62336", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9", "package" : "rhelai3/bootc-azure-cuda-rhel9:1788273909" }, { "product_name" : "Red Hat Enterprise Linux AI 3.3", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:62336", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9", "package" : "rhelai3/bootc-cuda-rhel9:1788260684" }, { "product_name" : "Red Hat Enterprise Linux AI 3.3", "release_date" : "2026-09-01T00:00:00Z", "advisory" : "RHSA-2026:62336", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3.3::el9", "package" : "rhelai3/bootc-gcp-cuda-rhel9:1788273977" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-automl-rhel9:1786612415" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-autorag-rhel9:1786612637" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-llm-d-kv-cache-rhel9:1787169432" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-mlflow-rhel9:1787226790" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-openvino-model-server-rhel9:1787303251" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1787073866" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1787073873" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1787073459" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1787073611" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1787073451" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1787073451" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-th06-cpu-torch210-py312-rhel9:1787076778" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-th06-cuda130-torch210-py312-rhel9:1787077779" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-th06-rocm64-torch291-py312-rhel9:1787076481" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-training-cuda128-torch29-py312-rhel9:1786611803" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-training-rocm64-torch29-py312-rhel9:1786611435" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9:1786613209" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1787121387" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:1787074331" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1787073605" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1787073546" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1787073717" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1787073713" }, { "product_name" : "Red Hat OpenShift AI 3.4", "release_date" : "2026-08-27T00:00:00Z", "advisory" : "RHSA-2026:60520", "cpe" : "cpe:/a:redhat:openshift_ai:3.4::el9", "package" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1787073593" }, { "product_name" : "Red Hat Quay 3.1", "release_date" : "2026-08-11T00:00:00Z", "advisory" : "RHSA-2026:53520", "cpe" : "cpe:/a:redhat:quay:3.10::el8", "package" : "quay/quay-rhel8:1786395065" }, { "product_name" : "Red Hat Quay 3.12", "release_date" : "2026-08-10T00:00:00Z", "advisory" : "RHSA-2026:52968", "cpe" : "cpe:/a:redhat:quay:3.12::el8", "package" : "quay/quay-rhel8:1786170635" }, { "product_name" : "Red Hat Quay 3.15", "release_date" : "2026-07-30T00:00:00Z", "advisory" : "RHSA-2026:48933", "cpe" : "cpe:/a:redhat:quay:3.15::el8", "package" : "quay/quay-rhel8:1785261506" }, { "product_name" : "Red Hat Quay 3.9", "release_date" : "2026-08-05T00:00:00Z", "advisory" : "RHSA-2026:50931", "cpe" : "cpe:/a:redhat:quay:3.9::el8", "package" : "quay/quay-rhel8:1785950004" } ], "package_state" : [ { "product_name" : "Exploit Intelligence", "fix_state" : "Not affected", "package_name" : "exploit-intelligence-tech-preview/vulnerability-analysis-rhel9", "cpe" : "cpe:/a:redhat:exploit_intelligence:0" }, { "product_name" : "Lightspeed Core", "fix_state" : "Affected", "package_name" : "lightspeed-core/lightspeed-stack-rhel9", "cpe" : "cpe:/a:redhat:lightspeed_core" }, { "product_name" : "Lightspeed Core", "fix_state" : "Affected", "package_name" : "lightspeed-core/rag-tool-cpu-rhel9", "cpe" : "cpe:/a:redhat:lightspeed_core" }, { "product_name" : "Lightspeed Core", "fix_state" : "Affected", "package_name" : "lightspeed-core/rag-tool-cuda-12.9-rhel9", "cpe" : "cpe:/a:redhat:lightspeed_core" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Not affected", "package_name" : "openshift-lightspeed/lightspeed-ocp-rag-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Affected", "package_name" : "openshift-lightspeed/lightspeed-service-api-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "OpenShift Lightspeed", "fix_state" : "Not affected", "package_name" : "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9", "cpe" : "cpe:/a:redhat:openshift_lightspeed" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaiis/vllm-cpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaiis/vllm-cuda-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaiis/vllm-neuron-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaiis/vllm-rocm-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaiis/vllm-spyre-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaiis/vllm-tpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaii/vllm-cpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaii/vllm-cuda-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaii/vllm-gaudi-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaii/vllm-neuron-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaii/vllm-rocm-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Affected", "package_name" : "rhaii/vllm-spyre-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat AI Inference Server", "fix_state" : "Will not fix", "package_name" : "rhaii/vllm-tpu-rhel9", "cpe" : "cpe:/a:redhat:ai_inference_server:3" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-25/lightspeed-chatbot-rhel8", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-26/hub-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-26/lightspeed-chatbot-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-27/hub-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform-27/lightspeed-chatbot-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "ansible-automation-platform/automation-dashboard-rhel9", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Ansible Automation Platform 2", "fix_state" : "Not affected", "package_name" : "python-pillow", "cpe" : "cpe:/a:redhat:ansible_automation_platform:2" }, { "product_name" : "Red Hat Enterprise Linux 7", "fix_state" : "Not affected", "package_name" : "python-pillow", "cpe" : "cpe:/o:redhat:enterprise_linux:7" }, { "product_name" : "Red Hat Enterprise Linux 8", "fix_state" : "Not affected", "package_name" : "python-pillow", "cpe" : "cpe:/o:redhat:enterprise_linux:8" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-azure-rocm-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-gaudi-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3", "fix_state" : "Affected", "package_name" : "rhelai3/bootc-rocm-rhel9", "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-caikit-nlp-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-caikit-tgis-serving-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-kserve-agent-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-kserve-autogluon-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-kserve-controller-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-kserve-router-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-kserve-storage-initializer-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llama-stack-core-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-llm-d-inference-scheduler-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-th06-cpu-torch291-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-th06-cuda130-torch291-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Not affected", "package_name" : "rhoai/odh-trustyai-nemo-guardrails-server-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-vllm-gaudi-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat OpenShift AI (RHOAI)", "fix_state" : "Affected", "package_name" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9", "cpe" : "cpe:/a:redhat:openshift_ai" }, { "product_name" : "Red Hat Quay 3", "fix_state" : "Affected", "package_name" : "quay/quay-rhel9", "cpe" : "cpe:/a:redhat:quay:3" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Not affected", "package_name" : "python-pillow", "cpe" : "cpe:/a:redhat:satellite:6" }, { "product_name" : "Red Hat Satellite 6", "fix_state" : "Not affected", "package_name" : "satellite:el8/python-pillow", "cpe" : "cpe:/a:redhat:satellite:6" } ], "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-59200\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-59200\nhttps://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09\nhttps://github.com/python-pillow/Pillow/pull/9718\nhttps://github.com/python-pillow/Pillow/releases/tag/12.3.0\nhttps://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565" ], "name" : "CVE-2026-59200", "mitigation" : { "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "lang" : "en:us" }, "csaw" : false }