CVE-2026-54058 | python-pillow Pillow up to 12.2.x AREA image tobytes stride information disclosure

A vulnerability, which was classified as problematic, has been found in python-pillow Pillow up to 12.2.x. Affected by this issue is the function tobytes of the component AREA image Handler. This manipulation of the argument stride causes information disclosure.

The identification of this vulnerability is CVE-2026-54058. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More