CVE-2026-55380
published 2026-07-06CVE-2026-55380: Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.42%
35.0th percentile
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
Affected
79 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ansible-automation-platform-25 | lightspeed-chatbot-rhel8 | — | — |
| ansible-automation-platform-26 | hub-rhel9 | — | — |
| ansible-automation-platform-26 | lightspeed-chatbot-rhel9 | — | — |
| ansible-automation-platform-27 | hub-rhel9 | — | — |
| ansible-automation-platform-27 | lightspeed-chatbot-rhel9 | — | — |
| ansible-automation-platform | automation-dashboard-rhel9 | — | — |
| exploit-intelligence-tech-preview | vulnerability-analysis-rhel9 | — | — |
| lightspeed-core | lightspeed-stack-rhel9 | — | — |
| openshift-lightspeed-tech-preview | lightspeed-rag-tool-rhel9 | — | — |
| openshift-lightspeed | lightspeed-ocp-rag-rhel9 | — | — |
| openshift-lightspeed | lightspeed-service-api-rhel9 | — | — |
| python-pillow | pillow | < 12.3.0 | 12.3.0 |
| python | pillow | < 12.3.0 | 12.3.0 |
| python | pillow | >= 0 < 12.3.0 | 12.3.0 |
| quay | quay-rhel8 | — | — |
| quay | quay-rhel9 | — | — |
| rhaii | model-opt-cuda-rhel9 | — | — |
| rhaii | vllm-cpu-rhel9 | — | — |
| rhaii | vllm-cuda-rhel9 | — | — |
| rhaii | vllm-gaudi-rhel9 | — | — |
| rhaii | vllm-neuron-rhel9 | — | — |
| rhaii | vllm-rocm-rhel9 | — | — |
| rhaii | vllm-spyre-rhel9 | — | — |
| rhaii | vllm-tpu-rhel9 | — | — |
| rhaiis | model-opt-cuda-rhel9 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
ghsa·2026-07-20
CVE-2026-55380 [HIGH] CWE-789 Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
## Description
`PIL/GdImageFile.py` `GdImageFile._open()` reads image dimensions from the GD 2.x header and stores them in `self._size` without calling `Image._decompression_bomb_check()`. Because `GdImageFile` is **not registered with `Image.register_open()`**, it never passes through the standard `Image.open()` code path that enforces Pillow's decompression bomb guard. The plugin exposes its own entry point — `PIL.GdImageFile.open(fp)` — which directly instantiates the class, fully bypassing the documented protection.
**Vulnerable code (`PIL/GdImageFile.py` lines 50–61):**
```python
def _open(self) -> None:
s = self.fp.read(1037)
if i16(s) not in [65534, 65535]:
raise SyntaxError("Not a vali
VulDB
Pillow up to 12.2.x GD Image File Parser PIL/GdImageFile.py GdImageFile._open heap-based overflow
vuldb·2026-07-06·CVSS 7.5
CVE-2026-55380 [HIGH] Pillow up to 12.2.x GD Image File Parser PIL/GdImageFile.py GdImageFile._open heap-based overflow
A vulnerability was found in Pillow up to 12.2.x. It has been rated as problematic. This impacts the function GdImageFile._open of the file PIL/GdImageFile.py of the component GD Image File Parser. This manipulation causes heap-based buffer overflow.
This vulnerability is registered as CVE-2026-55380. Remote exploitation of the attack is possible. No exploit is available.
Red Hat
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
vendor_redhat·2026-07-06·CVSS 7.5
CVE-2026-55380 [HIGH] CWE-1285 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.
Statement: A denial-of-service vulnera
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [fedora-all]
bugzilla·2026-07-07·CVSS 7.5
CVE-2026-55380 [HIGH] CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [fedora-all]
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
Bugzilla
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [epel-all]
bugzilla·2026-07-07·CVSS 7.5
CVE-2026-55380 [HIGH] CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [epel-all]
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
Bugzilla
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
bugzilla·2026-07-06·CVSS 7.5
CVE-2026-55380 [HIGH] CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
CVE-2026-55380 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rsthttps://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pmhttps://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm
2026-07-06
Published