This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-59198 →

UBUNTU-CVE-2026-59198

Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with...

Original description

The description as published by the source.

Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Ubuntu:Pro:20.04:LTS pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-4ubuntu0.9+esm1"}]}]

Ubuntu:Pro:20.04:LTS pillow-python2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Ubuntu:22.04:LTS pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1ubuntu0.5"}]}]

Ubuntu:24.04:LTS pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.0-1ubuntu1.3"}]}]

Ubuntu:26.04:LTS pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.1-2ubuntu1.3"}]}]

References

advisory ubuntu.com
report ubuntu.com
report cve.org
report github.com
report github.com
report github.com
report github.com