CVE-2026-59200 | python-pillow Pillow up to 12.2.x FlateDecode PIL/PdfParser.py PdfParser.PdfStream.decode Field resource consumption

July 14, 2026 Yanac

A vulnerability has been found in python-pillow Pillow up to 12.2.x and classified as problematic. This vulnerability affects the function PdfParser.PdfStream.decode of the file PIL/PdfParser.py of the component FlateDecode Handler. Performing a manipulation of the argument Field results in resource consumption.

This vulnerability is identified as CVE-2026-59200. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More