OPENSUSE-SU-2026:22246-1
Vulnerability from csaf_opensuse - Published: 2026-11-05 03:40 - Updated: 2026-11-10 19:42Summary
Security update for python-Pillow
Severity
Critical
Notes
Title of the patch: Security update for python-Pillow
Description of the patch: This update for python-Pillow fixes the following issues:
- CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802).
- CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to unbounded allocation DoS
(bsc#1286801).
- CVE-2026-96638: BMP RLE decoder memory-amplification DoS via unbounded delta escape/absolute mode (bsc#1286800).
- CVE-2026-96639: multi-frame loaders can reuse stale native image storage after mode transitions (bsc#1286799).
- CVE-2026-96640: PDF append accepts malformed shared page-tree DAG, which can cause resource exhaustion (bsc#1286798).
- CVE-2026-96641: reachable undefined behavior in native integer operations can lead to denial of service or logic
integrity compromise (bsc#1286797).
- CVE-2026-96642: `TarIO` negative size field causes infinite CPU-spin loop (bsc#1286796).
- CVE-2026-96643: PNG eXIf chunk makes EXIF parsing run in quadratic time (bsc#1286795).
- CVE-2026-96778: heap buffer overflow writing JPEG comment after ICC profile fills buffer (bsc#1286793).
- CVE-2026-112390: Denial of Service via infinite loop during crafted MIC image parsing (bsc#1286256).
- CVE-2026-112391: Denial of Service via unbounded recursion in PDF parser (bsc#1286273).
- CVE-2026-112392: Denial of Service via zero-size images in rank filters (bsc#1286287).
- CVE-2026-112393: heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data
(bsc#1286325).
- CVE-2026-112394: `P;2L` and `P;4L` decoders may read 1 to 3 bytes past the passed buffer size (bsc#1286311).
- CVE-2026-112395: Pillow tiled-TIFF decoder reads past tile buffer in `copy4` (bsc#1286312).
- CVE-2026-112396: heap use-after-free when encoding TIFF to an in-memory buffer (bsc#1286313).
- CVE-2026-112397: out-of-bounds access in `_imagingmorph` on a zero-width image (bsc#1286314).
- CVE-2026-112398: heap buffer overflow in FPX JPEG decoding can lead to code execution (bsc#1286406).
- CVE-2026-112399: Denial of service via crafted APNG image (bsc#1286368).
- CVE-2026-112400: Denial of Service via memory exhaustion from crafted GIF image (bsc#1286370).
- CVE-2026-112401: Denial of Service via crafted GIF comments (bsc#1286372).
- CVE-2026-112402: Denial of service via double free during image transformation (bsc#1286381).
- CVE-2026-112403: heap buffer overflow in `ImagingJpegDecode` allows for code execution (bsc#1286405).
- CVE-2026-112404: Denial of Service via out-of-bounds read in TIFF decoding (bsc#1286388).
- CVE-2026-112405: NULL pointer dereference in `Image.merge` via an unvalidated band 0 (bsc#1286404).
- CVE-2026-112406: infinite loop in `PdfParser.rewrite_pages` on page tree `Parent` cycle (bsc#1286403).
- CVE-2026-112891: quadratic GIF comment copying during save (bsc#1286402).
- CVE-2026-112892: MSP RLE decoder expands a tiny file into unbounded memory (bsc#1286401).
- CVE-2026-112893: Denial of Service via invalid pointer free during font rendering (bsc#1286392).
- CVE-2026-112894: Denial of Service via crafted multi-frame image conversion (bsc#1286408).
- CVE-2026-112895: Denial of service via crafted PDF during append operations (bsc#1286411).
- CVE-2026-112896: TIFF encoder `ColorMap` plane-size mismatch causes a heap out-of-bounds read (bsc#1286400).
- CVE-2026-112897: `TiffDecode` returns uninitialized memory as pixels for short JPEG strips (bsc#1286398).
- CVE-2026-112898: `Image.quantize()` with empty palette can leak uninitialized stack memory (bsc#1286399).
- CVE-2026-112899: EPS `load(scale)` lets Ghostscript render past the decompression bomb limit (bsc#1286489).
- CVE-2026-112900: argument Injection in Ghostscript call can lead to remote code execution (bsc#1286397).
- CVE-2026-112901: ReDoS in `XbmImagePlugin` can be triggered by 512-byte file (bsc#1286396).
- CVE-2026-112902: memory disclosure and segfault in libtiff encoder via crafted TIFF tags (bsc#1286804).
- CVE-2026-114501: Arrow export leaks stale heap memory when `PILLOW_ALIGNMENT > 1` (bsc#1286803).
Patchnames: openSUSE-Leap-16.0-2055
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
low
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.8 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.2 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
7.5 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
8.1 (High)
Affected products
Recommended
8 products, the same list as for
CVE-2026-112390
Threats
Impact
important
References
158 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python-Pillow",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python-Pillow fixes the following issues:\n\n- CVE-2026-96636: decompression-bomb protection bypass via multi-frame `seek()` in MPO and DCX (bsc#1286802).\n- CVE-2026-96637: decompression bomb check bypass in `SpiderImagePlugin.seek()` leads to unbounded allocation DoS\n (bsc#1286801).\n- CVE-2026-96638: BMP RLE decoder memory-amplification DoS via unbounded delta escape/absolute mode (bsc#1286800).\n- CVE-2026-96639: multi-frame loaders can reuse stale native image storage after mode transitions (bsc#1286799).\n- CVE-2026-96640: PDF append accepts malformed shared page-tree DAG, which can cause resource exhaustion (bsc#1286798).\n- CVE-2026-96641: reachable undefined behavior in native integer operations can lead to denial of service or logic\n integrity compromise (bsc#1286797).\n- CVE-2026-96642: `TarIO` negative size field causes infinite CPU-spin loop (bsc#1286796).\n- CVE-2026-96643: PNG eXIf chunk makes EXIF parsing run in quadratic time (bsc#1286795).\n- CVE-2026-96778: heap buffer overflow writing JPEG comment after ICC profile fills buffer (bsc#1286793).\n- CVE-2026-112390: Denial of Service via infinite loop during crafted MIC image parsing (bsc#1286256).\n- CVE-2026-112391: Denial of Service via unbounded recursion in PDF parser (bsc#1286273).\n- CVE-2026-112392: Denial of Service via zero-size images in rank filters (bsc#1286287).\n- CVE-2026-112393: heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data\n (bsc#1286325).\n- CVE-2026-112394: `P;2L` and `P;4L` decoders may read 1 to 3 bytes past the passed buffer size (bsc#1286311).\n- CVE-2026-112395: Pillow tiled-TIFF decoder reads past tile buffer in `copy4` (bsc#1286312).\n- CVE-2026-112396: heap use-after-free when encoding TIFF to an in-memory buffer (bsc#1286313).\n- CVE-2026-112397: out-of-bounds access in `_imagingmorph` on a zero-width image (bsc#1286314).\n- CVE-2026-112398: heap buffer overflow in FPX JPEG decoding can lead to code execution (bsc#1286406).\n- CVE-2026-112399: Denial of service via crafted APNG image (bsc#1286368).\n- CVE-2026-112400: Denial of Service via memory exhaustion from crafted GIF image (bsc#1286370).\n- CVE-2026-112401: Denial of Service via crafted GIF comments (bsc#1286372).\n- CVE-2026-112402: Denial of service via double free during image transformation (bsc#1286381).\n- CVE-2026-112403: heap buffer overflow in `ImagingJpegDecode` allows for code execution (bsc#1286405).\n- CVE-2026-112404: Denial of Service via out-of-bounds read in TIFF decoding (bsc#1286388).\n- CVE-2026-112405: NULL pointer dereference in `Image.merge` via an unvalidated band 0 (bsc#1286404).\n- CVE-2026-112406: infinite loop in `PdfParser.rewrite_pages` on page tree `Parent` cycle (bsc#1286403).\n- CVE-2026-112891: quadratic GIF comment copying during save (bsc#1286402).\n- CVE-2026-112892: MSP RLE decoder expands a tiny file into unbounded memory (bsc#1286401).\n- CVE-2026-112893: Denial of Service via invalid pointer free during font rendering (bsc#1286392).\n- CVE-2026-112894: Denial of Service via crafted multi-frame image conversion (bsc#1286408).\n- CVE-2026-112895: Denial of service via crafted PDF during append operations (bsc#1286411).\n- CVE-2026-112896: TIFF encoder `ColorMap` plane-size mismatch causes a heap out-of-bounds read (bsc#1286400).\n- CVE-2026-112897: `TiffDecode` returns uninitialized memory as pixels for short JPEG strips (bsc#1286398).\n- CVE-2026-112898: `Image.quantize()` with empty palette can leak uninitialized stack memory (bsc#1286399).\n- CVE-2026-112899: EPS `load(scale)` lets Ghostscript render past the decompression bomb limit (bsc#1286489).\n- CVE-2026-112900: argument Injection in Ghostscript call can lead to remote code execution (bsc#1286397).\n- CVE-2026-112901: ReDoS in `XbmImagePlugin` can be triggered by 512-byte file (bsc#1286396).\n- CVE-2026-112902: memory disclosure and segfault in libtiff encoder via crafted TIFF tags (bsc#1286804).\n- CVE-2026-114501: Arrow export leaks stale heap memory when `PILLOW_ALIGNMENT \u003e 1` (bsc#1286803).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-2055",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_22246-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1286256",
"url": "https://bugzilla.suse.com/1286256"
},
{
"category": "self",
"summary": "SUSE Bug 1286273",
"url": "https://bugzilla.suse.com/1286273"
},
{
"category": "self",
"summary": "SUSE Bug 1286287",
"url": "https://bugzilla.suse.com/1286287"
},
{
"category": "self",
"summary": "SUSE Bug 1286311",
"url": "https://bugzilla.suse.com/1286311"
},
{
"category": "self",
"summary": "SUSE Bug 1286312",
"url": "https://bugzilla.suse.com/1286312"
},
{
"category": "self",
"summary": "SUSE Bug 1286313",
"url": "https://bugzilla.suse.com/1286313"
},
{
"category": "self",
"summary": "SUSE Bug 1286314",
"url": "https://bugzilla.suse.com/1286314"
},
{
"category": "self",
"summary": "SUSE Bug 1286325",
"url": "https://bugzilla.suse.com/1286325"
},
{
"category": "self",
"summary": "SUSE Bug 1286368",
"url": "https://bugzilla.suse.com/1286368"
},
{
"category": "self",
"summary": "SUSE Bug 1286370",
"url": "https://bugzilla.suse.com/1286370"
},
{
"category": "self",
"summary": "SUSE Bug 1286372",
"url": "https://bugzilla.suse.com/1286372"
},
{
"category": "self",
"summary": "SUSE Bug 1286381",
"url": "https://bugzilla.suse.com/1286381"
},
{
"category": "self",
"summary": "SUSE Bug 1286388",
"url": "https://bugzilla.suse.com/1286388"
},
{
"category": "self",
"summary": "SUSE Bug 1286392",
"url": "https://bugzilla.suse.com/1286392"
},
{
"category": "self",
"summary": "SUSE Bug 1286396",
"url": "https://bugzilla.suse.com/1286396"
},
{
"category": "self",
"summary": "SUSE Bug 1286397",
"url": "https://bugzilla.suse.com/1286397"
},
{
"category": "self",
"summary": "SUSE Bug 1286398",
"url": "https://bugzilla.suse.com/1286398"
},
{
"category": "self",
"summary": "SUSE Bug 1286399",
"url": "https://bugzilla.suse.com/1286399"
},
{
"category": "self",
"summary": "SUSE Bug 1286400",
"url": "https://bugzilla.suse.com/1286400"
},
{
"category": "self",
"summary": "SUSE Bug 1286401",
"url": "https://bugzilla.suse.com/1286401"
},
{
"category": "self",
"summary": "SUSE Bug 1286402",
"url": "https://bugzilla.suse.com/1286402"
},
{
"category": "self",
"summary": "SUSE Bug 1286403",
"url": "https://bugzilla.suse.com/1286403"
},
{
"category": "self",
"summary": "SUSE Bug 1286404",
"url": "https://bugzilla.suse.com/1286404"
},
{
"category": "self",
"summary": "SUSE Bug 1286405",
"url": "https://bugzilla.suse.com/1286405"
},
{
"category": "self",
"summary": "SUSE Bug 1286406",
"url": "https://bugzilla.suse.com/1286406"
},
{
"category": "self",
"summary": "SUSE Bug 1286408",
"url": "https://bugzilla.suse.com/1286408"
},
{
"category": "self",
"summary": "SUSE Bug 1286411",
"url": "https://bugzilla.suse.com/1286411"
},
{
"category": "self",
"summary": "SUSE Bug 1286489",
"url": "https://bugzilla.suse.com/1286489"
},
{
"category": "self",
"summary": "SUSE Bug 1286793",
"url": "https://bugzilla.suse.com/1286793"
},
{
"category": "self",
"summary": "SUSE Bug 1286795",
"url": "https://bugzilla.suse.com/1286795"
},
{
"category": "self",
"summary": "SUSE Bug 1286796",
"url": "https://bugzilla.suse.com/1286796"
},
{
"category": "self",
"summary": "SUSE Bug 1286797",
"url": "https://bugzilla.suse.com/1286797"
},
{
"category": "self",
"summary": "SUSE Bug 1286798",
"url": "https://bugzilla.suse.com/1286798"
},
{
"category": "self",
"summary": "SUSE Bug 1286799",
"url": "https://bugzilla.suse.com/1286799"
},
{
"category": "self",
"summary": "SUSE Bug 1286800",
"url": "https://bugzilla.suse.com/1286800"
},
{
"category": "self",
"summary": "SUSE Bug 1286801",
"url": "https://bugzilla.suse.com/1286801"
},
{
"category": "self",
"summary": "SUSE Bug 1286802",
"url": "https://bugzilla.suse.com/1286802"
},
{
"category": "self",
"summary": "SUSE Bug 1286803",
"url": "https://bugzilla.suse.com/1286803"
},
{
"category": "self",
"summary": "SUSE Bug 1286804",
"url": "https://bugzilla.suse.com/1286804"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112390 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112391 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112392 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112393 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112394 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112395 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112396 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112397 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112398 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112399 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112400 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112401 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112403 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112404 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112405 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112406 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112891 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112892 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112893 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112894 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112895 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112896 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112897 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112898 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112899 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112900 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112901 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-112902 page",
"url": "https://www.suse.com/security/cve/CVE-2026-112902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-114501 page",
"url": "https://www.suse.com/security/cve/CVE-2026-114501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96636 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96637 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96638 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96639 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96640 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96641 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96642 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96643 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96778 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96778/"
}
],
"title": "Security update for python-Pillow",
"tracking": {
"current_release_date": "2026-11-10T19:42:14Z",
"generator": {
"date": "2026-11-05T03:40:19Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:22246-1",
"initial_release_date": "2026-11-05T03:40:19Z",
"revision_history": [
{
"date": "2026-11-05T03:40:19Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-11-10T19:42:14Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"product": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"product_id": "python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow@11.3.0-160000.9.1?arch=aarch64\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"product": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"product_id": "python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow-tk@11.3.0-160000.9.1?arch=aarch64\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"product": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"product_id": "python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow@11.3.0-160000.9.1?arch=ppc64le\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"product": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"product_id": "python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow-tk@11.3.0-160000.9.1?arch=ppc64le\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-0:11.3.0-160000.9.1.s390x",
"product": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.s390x",
"product_id": "python313-Pillow-0:11.3.0-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow@11.3.0-160000.9.1?arch=s390x\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"product": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"product_id": "python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow-tk@11.3.0-160000.9.1?arch=s390x\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"product": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"product_id": "python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow@11.3.0-160000.9.1?arch=x86_64\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64",
"product": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64",
"product_id": "python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python:pillow:11.3.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-Pillow-tk@11.3.0-160000.9.1?arch=x86_64\u0026upstream=python-Pillow-0:11.3.0-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64"
},
"product_reference": "python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le"
},
"product_reference": "python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x"
},
"product_reference": "python313-Pillow-0:11.3.0-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-0:11.3.0-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64"
},
"product_reference": "python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64"
},
"product_reference": "python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le"
},
"product_reference": "python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x"
},
"product_reference": "python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
},
"product_reference": "python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-112390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112390"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF with at least three IFDs never advances. When an application with olefile installed reads n_frames or saves all frames from a crafted MIC file, the non-advancing traversal can hold a worker at full CPU indefinitely. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112390",
"url": "https://www.suse.com/security/cve/CVE-2026-112390"
},
{
"category": "external",
"summary": "SUSE Bug 1286256 for CVE-2026-112390",
"url": "https://bugzilla.suse.com/1286256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112390"
},
{
"cve": "CVE-2026-112391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112391"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow\u0027s PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested PDF to an application that saves an image with PDF append enabled. This can raise an uncaught RecursionError or terminate the worker, causing denial of service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112391",
"url": "https://www.suse.com/security/cve/CVE-2026-112391"
},
{
"category": "external",
"summary": "SUSE Bug 1286273 for CVE-2026-112391",
"url": "https://bugzilla.suse.com/1286273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "low"
}
],
"title": "CVE-2026-112391"
},
{
"cve": "CVE-2026-112392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112392"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112392",
"url": "https://www.suse.com/security/cve/CVE-2026-112392"
},
{
"category": "external",
"summary": "SUSE Bug 1286287 for CVE-2026-112392",
"url": "https://bugzilla.suse.com/1286287"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112392"
},
{
"cve": "CVE-2026-112393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112393"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer size instead of the current write position, allowing an attacker-controlled out-of-line TIFF tag or retained ICC profile to be copied beyond the allocation after libtiff seeks forward. This overflow can crash the process and may allow code execution. Independently, unwritten alignment gaps in compressed TIFF output larger than 64 KiB can disclose stale heap bytes without a crafted tag. File paths and targets with real file descriptors are unaffected. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112393",
"url": "https://www.suse.com/security/cve/CVE-2026-112393"
},
{
"category": "external",
"summary": "SUSE Bug 1286325 for CVE-2026-112393",
"url": "https://bugzilla.suse.com/1286325"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112393"
},
{
"cve": "CVE-2026-112394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112394"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose accepted size is smaller than the unpacker\u0027s actual footprint. This can disclose up to three adjacent heap bytes in output pixels or crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112394",
"url": "https://www.suse.com/security/cve/CVE-2026-112394"
},
{
"category": "external",
"summary": "SUSE Bug 1286311 for CVE-2026-112394",
"url": "https://bugzilla.suse.com/1286311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112394"
},
{
"cve": "CVE-2026-112395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112395"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow\u0027s tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow\u0027s stride-and-copy loop walks beyond that allocation. An attacker can supply a crafted tiled TIFF to an application that loads it. This can expose adjacent heap data in pixels or crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112395",
"url": "https://www.suse.com/security/cve/CVE-2026-112395"
},
{
"category": "external",
"summary": "SUSE Bug 1286312 for CVE-2026-112395",
"url": "https://bugzilla.suse.com/1286312"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112395"
},
{
"cve": "CVE-2026-112396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112396"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in ImagingLibTiffEncode; the error path then frees the output buffer without closing or clearing the TIFF handle, and later cleanup flushes through the write callback into freed memory, which can crash the process and may enable code execution. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112396",
"url": "https://www.suse.com/security/cve/CVE-2026-112396"
},
{
"category": "external",
"summary": "SUSE Bug 1286313 for CVE-2026-112396",
"url": "https://bugzilla.suse.com/1286313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112396"
},
{
"cve": "CVE-2026-112397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112397"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112397",
"url": "https://www.suse.com/security/cve/CVE-2026-112397"
},
{
"category": "external",
"summary": "SUSE Bug 1286314 for CVE-2026-112397",
"url": "https://bugzilla.suse.com/1286314"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112397"
},
{
"cve": "CVE-2026-112398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112398"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112398",
"url": "https://www.suse.com/security/cve/CVE-2026-112398"
},
{
"category": "external",
"summary": "SUSE Bug 1286406 for CVE-2026-112398",
"url": "https://bugzilla.suse.com/1286406"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112398"
},
{
"cve": "CVE-2026-112399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112399"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112399",
"url": "https://www.suse.com/security/cve/CVE-2026-112399"
},
{
"category": "external",
"summary": "SUSE Bug 1286368 for CVE-2026-112399",
"url": "https://bugzilla.suse.com/1286368"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112399"
},
{
"cve": "CVE-2026-112400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112400"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and continues processing the same image object, later seek or load operations allocate according to those dimensions and can exhaust memory, denying service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112400",
"url": "https://www.suse.com/security/cve/CVE-2026-112400"
},
{
"category": "external",
"summary": "SUSE Bug 1286370 for CVE-2026-112400",
"url": "https://bugzilla.suse.com/1286370"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112400"
},
{
"cve": "CVE-2026-112401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112401"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open(). An attacker can submit a small-dimension GIF containing many comment extensions to any application that opens the file. This can consume excessive CPU and deny service before the application can inspect the image. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112401",
"url": "https://www.suse.com/security/cve/CVE-2026-112401"
},
{
"category": "external",
"summary": "SUSE Bug 1286372 for CVE-2026-112401",
"url": "https://bugzilla.suse.com/1286372"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112401"
},
{
"cve": "CVE-2026-112402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112402"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The output image allocation must succeed while the additional per-column lookup allocation fails, after which the error path deletes image storage that later cleanup releases again. An attacker who can drive such a large Image.transform() operation under memory pressure may trigger the failure. This can crash the process and may corrupt memory. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112402",
"url": "https://www.suse.com/security/cve/CVE-2026-112402"
},
{
"category": "external",
"summary": "SUSE Bug 1286381 for CVE-2026-112402",
"url": "https://bugzilla.suse.com/1286381"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112402"
},
{
"cve": "CVE-2026-112403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112403"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg\u0027s actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112403",
"url": "https://www.suse.com/security/cve/CVE-2026-112403"
},
{
"category": "external",
"summary": "SUSE Bug 1286405 for CVE-2026-112403",
"url": "https://bugzilla.suse.com/1286405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112403"
},
{
"cve": "CVE-2026-112404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112404"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow\u0027s TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pillow does not verify that the required input row fits inside the row libtiff produced, while the strip path has this validation. Loading pixels from such a crafted TIFF can expose adjacent heap data in output pixels or crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112404",
"url": "https://www.suse.com/security/cve/CVE-2026-112404"
},
{
"category": "external",
"summary": "SUSE Bug 1286388 for CVE-2026-112404",
"url": "https://bugzilla.suse.com/1286388"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112404"
},
{
"cve": "CVE-2026-112405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112405"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow\u0027s Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file can reach this path when an application opens and loads it, or a caller can invoke Image.merge() directly with such a first band. This causes a native process crash. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112405",
"url": "https://www.suse.com/security/cve/CVE-2026-112405"
},
{
"category": "external",
"summary": "SUSE Bug 1286404 for CVE-2026-112405",
"url": "https://bugzilla.suse.com/1286404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112405"
},
{
"cve": "CVE-2026-112406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112406"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to that PDF. This can hold the worker at full CPU and deny service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112406",
"url": "https://www.suse.com/security/cve/CVE-2026-112406"
},
{
"category": "external",
"summary": "SUSE Bug 1286403 for CVE-2026-112406",
"url": "https://bugzilla.suse.com/1286403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112406"
},
{
"cve": "CVE-2026-112891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112891"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attacker can supply an image with a large GIF comment to an application that saves it as GIF. This can consume excessive CPU and delay or deny service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112891",
"url": "https://www.suse.com/security/cve/CVE-2026-112891"
},
{
"category": "external",
"summary": "SUSE Bug 1286402 for CVE-2026-112891",
"url": "https://bugzilla.suse.com/1286402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112891"
},
{
"cve": "CVE-2026-112892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112892"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow\u0027s MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an application that loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the decompression-bomb check. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112892",
"url": "https://www.suse.com/security/cve/CVE-2026-112892"
},
{
"category": "external",
"summary": "SUSE Bug 1286401 for CVE-2026-112892",
"url": "https://bugzilla.suse.com/1286401"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112892"
},
{
"cve": "CVE-2026-112893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112893"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112893",
"url": "https://www.suse.com/security/cve/CVE-2026-112893"
},
{
"category": "external",
"summary": "SUSE Bug 1286392 for CVE-2026-112893",
"url": "https://bugzilla.suse.com/1286392"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112893"
},
{
"cve": "CVE-2026-112894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112894"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-frame image, including a small APNG with a large declared frame count, to an application that converts it to a multipage PDF. This can consume excessive CPU and deny service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112894",
"url": "https://www.suse.com/security/cve/CVE-2026-112894"
},
{
"category": "external",
"summary": "SUSE Bug 1286408 for CVE-2026-112894",
"url": "https://bugzilla.suse.com/1286408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112894"
},
{
"cve": "CVE-2026-112895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112895"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offset guard, so deep or cyclic page trees and long chains of unique trailer offsets can exhaust the Python stack. Repeated non-cyclic /Kids references can also cause super-linear CPU and memory use. An attacker can supply such a PDF to an application that calls Image.save with PDF append enabled. This can raise an uncaught RecursionError or consume excessive CPU and memory before output is written, causing denial of service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112895",
"url": "https://www.suse.com/security/cve/CVE-2026-112895"
},
{
"category": "external",
"summary": "SUSE Bug 1286411 for CVE-2026-112895",
"url": "https://bugzilla.suse.com/1286411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112895"
},
{
"cve": "CVE-2026-112896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112896"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application that re-encodes the attacker\u0027s TIFF with libtiff can trigger the out-of-bounds read. This can disclose heap memory in the output or crash the process. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112896",
"url": "https://www.suse.com/security/cve/CVE-2026-112896"
},
{
"category": "external",
"summary": "SUSE Bug 1286400 for CVE-2026-112896",
"url": "https://bugzilla.suse.com/1286400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112896"
},
{
"cve": "CVE-2026-112897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112897"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112897",
"url": "https://www.suse.com/security/cve/CVE-2026-112897"
},
{
"category": "external",
"summary": "SUSE Bug 1286398 for CVE-2026-112897",
"url": "https://bugzilla.suse.com/1286398"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112897"
},
{
"cve": "CVE-2026-112898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112898"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as output pixel indices. An attacker who controls the palette image can obtain stack contents from a returned PNG or GIF. This can disclose addresses and stack-canary data without an out-of-bounds access, memory corruption, or process crash. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112898",
"url": "https://www.suse.com/security/cve/CVE-2026-112898"
},
{
"category": "external",
"summary": "SUSE Bug 1286399 for CVE-2026-112898",
"url": "https://bugzilla.suse.com/1286399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112898"
},
{
"cve": "CVE-2026-112899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112899"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image dimensions before invoking Ghostscript. Applications that process untrusted EPS or PostScript files using an application-selected scale greater than one can incur excessive Ghostscript CPU and temporary disk consumption. In versions with decompression-bomb protection, the scaled output is checked only after Ghostscript has completed rendering, allowing resource consumption beyond the configured pixel limit. The amplification depends on the scale selected by the application, not an attacker-controlled scale value. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112899",
"url": "https://www.suse.com/security/cve/CVE-2026-112899"
},
{
"category": "external",
"summary": "SUSE Bug 1286489 for CVE-2026-112899",
"url": "https://bugzilla.suse.com/1286489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112899"
},
{
"cve": "CVE-2026-112900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112900"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112900",
"url": "https://www.suse.com/security/cve/CVE-2026-112900"
},
{
"category": "external",
"summary": "SUSE Bug 1286397 for CVE-2026-112900",
"url": "https://bugzilla.suse.com/1286397"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "critical"
}
],
"title": "CVE-2026-112900"
},
{
"cve": "CVE-2026-112901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112901"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow\u0027s XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlled header before image dimensions are accepted, stalling a worker for minutes and denying service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112901",
"url": "https://www.suse.com/security/cve/CVE-2026-112901"
},
{
"category": "external",
"summary": "SUSE Bug 1286396 for CVE-2026-112901",
"url": "https://bugzilla.suse.com/1286396"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-112901"
},
{
"cve": "CVE-2026-112902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-112902"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField() that do not match libtiff\u0027s definition of the corresponding tag. When an application saves attacker-controlled image metadata through this encoder, crafted tag values can cause invalid memory reads, copying process memory into the encoded output or crashing the process. Applications that return the encoded output to an attacker can disclose that memory. The issue is reachable when re-saving compressed TIFF images and through certain conversions that preserve EXIF metadata into compressed TIFF output. This vulnerability is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-112902",
"url": "https://www.suse.com/security/cve/CVE-2026-112902"
},
{
"category": "external",
"summary": "SUSE Bug 1286804 for CVE-2026-112902",
"url": "https://bugzilla.suse.com/1286804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-112902"
},
{
"cve": "CVE-2026-114501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-114501"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image\u0027s rows are tightly contiguous and exports from im-\u003eblocks[0].ptr even when PILLOW_ALIGNMENT makes aligned_linesize include row padding or an aligned offset before the first row. The resulting Arrow buffer can include uninitialized padding, bytes preceding the first row, or stale heap contents from previously freed images. Applications that configure alignment and export images to Arrow can therefore disclose one user\u0027s pixels or other process memory to another user. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-114501",
"url": "https://www.suse.com/security/cve/CVE-2026-114501"
},
{
"category": "external",
"summary": "SUSE Bug 1286803 for CVE-2026-114501",
"url": "https://bugzilla.suse.com/1286803"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-114501"
},
{
"cve": "CVE-2026-96636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96636"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can use a tiny first frame to pass Image.open() and then declare an over-limit later frame. Normal frame iteration through seek(), load(), or ImageSequence.Iterator can decode that frame and commit hundreds of megabytes or more, causing memory-exhaustion denial of service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96636",
"url": "https://www.suse.com/security/cve/CVE-2026-96636"
},
{
"category": "external",
"summary": "SUSE Bug 1286802 for CVE-2026-96636",
"url": "https://bugzilla.suse.com/1286802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96636"
},
{
"cve": "CVE-2026-96637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96637"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multiple gigabytes of memory. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96637",
"url": "https://www.suse.com/security/cve/CVE-2026-96637"
},
{
"category": "external",
"summary": "SUSE Bug 1286801 for CVE-2026-96637",
"url": "https://bugzilla.suse.com/1286801"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96637"
},
{
"cve": "CVE-2026-96638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96638"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest_length without a per-branch cap. A delta can add roughly 255 image rows in one iteration, so a kilobyte-sized file with a large but permitted width can expand the data bytearray to hundreds of megabytes or more, causing memory-exhaustion denial of service. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96638",
"url": "https://www.suse.com/security/cve/CVE-2026-96638"
},
{
"category": "external",
"summary": "SUSE Bug 1286800 for CVE-2026-96638",
"url": "https://bugzilla.suse.com/1286800"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96638"
},
{
"cve": "CVE-2026-96639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96639"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96639",
"url": "https://www.suse.com/security/cve/CVE-2026-96639"
},
{
"category": "external",
"summary": "SUSE Bug 1286799 for CVE-2026-96639",
"url": "https://bugzilla.suse.com/1286799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96639"
},
{
"cve": "CVE-2026-96640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96640"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format=\"PDF\", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96640",
"url": "https://www.suse.com/security/cve/CVE-2026-96640"
},
{
"category": "external",
"summary": "SUSE Bug 1286798 for CVE-2026-96640",
"url": "https://bugzilla.suse.com/1286798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96640"
},
{
"cve": "CVE-2026-96641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96641"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative advances against INT_MIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in xsize += dx, producing a large positive width from a negative mathematical result. Applications that use getlength(), getsize(), or derived layout, quota, serialization, or allocation calculations can experience logic-integrity errors or resource consumption, while the high-level mask path commonly retains a decompression-bomb check. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96641",
"url": "https://www.suse.com/security/cve/CVE-2026-96641"
},
{
"category": "external",
"summary": "SUSE Bug 1286797 for CVE-2026-96641",
"url": "https://bugzilla.suse.com/1286797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96641"
},
{
"cve": "CVE-2026-96642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96642"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consumes a full CPU core, and never returns. TarIO is reached only when an application directly uses PIL.TarIO.TarIO rather than the default Image.open() path. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96642",
"url": "https://www.suse.com/security/cve/CVE-2026-96642"
},
{
"category": "external",
"summary": "SUSE Bug 1286796 for CVE-2026-96642",
"url": "https://bugzilla.suse.com/1286796"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96642"
},
{
"cve": "CVE-2026-96643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96643"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(), including common photo-upload rotation workflows. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96643",
"url": "https://www.suse.com/security/cve/CVE-2026-96643"
},
{
"category": "external",
"summary": "SUSE Bug 1286795 for CVE-2026-96643",
"url": "https://bugzilla.suse.com/1286795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96643"
},
{
"cve": "CVE-2026-96778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96778"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while preserving its ICC profile and forwarded comment can crash the process and may enable code execution in suitable runtime and heap layouts. This issue is fixed in version 13.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96778",
"url": "https://www.suse.com/security/cve/CVE-2026-96778"
},
{
"category": "external",
"summary": "SUSE Bug 1286793 for CVE-2026-96778",
"url": "https://bugzilla.suse.com/1286793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-0:11.3.0-160000.9.1.x86_64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.aarch64",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.ppc64le",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.s390x",
"openSUSE Leap 16.0:python313-Pillow-tk-0:11.3.0-160000.9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-05T03:40:19Z",
"details": "important"
}
],
"title": "CVE-2026-96778"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.