Описание
Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primary consequence is a Denial of Service (DoS), which could make the affected system or application unavailable.
Отчет
A flaw was found in the Python Pillow library. The PcfFontFile._load_bitmaps() method reads glyph dimensions from the PCF METRICS section and passes them directly to Image.frombytes() without calling Image._decompression_bomb_check(). This allows crafted PCF font data to cause excessive memory allocation, leading to a denial of service condition. An attacker could exploit this by providing a specially crafted PCF font file to an application that uses Pillow's font loading functionality.
Меры по смягчению последствий
Do not load PCF fonts from untrusted sources. If PCF font loading is required, validate font file dimensions before passing them to Pillow, or upgrade to Pillow 12.3.0 or later which includes the fix for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ansible Automation Platform 2 | python-pillow | Not affected | ||
| Red Hat Enterprise Linux 7 | python-pillow | Not affected | ||
| Red Hat Satellite 6 | satellite-capsule:el8/python-pillow | Not affected | ||
| Red Hat Satellite 6 | satellite:el8/python-pillow | Affected | ||
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | python3.12-pillow | Fixed | RHSA-2026:50319 | 04.08.2026 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | python3.12-pillow | Fixed | RHSA-2026:50319 | 04.08.2026 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | python3.12-pillow | Fixed | RHSA-2026:50336 | 04.08.2026 |
| Red Hat Enterprise Linux 8 | python-pillow | Fixed | RHSA-2026:39127 | 14.07.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | python-pillow | Fixed | RHSA-2026:52551 | 10.08.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | python-pillow | Fixed | RHSA-2026:52551 | 10.08.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.
Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.
Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.p ...
EPSS
7.5 High
CVSS3