CVE-2026-59198 | python-pillow Pillow up to 12.2.x TGA RLE Encoder buffer heap-based overflow

July 14, 2026 Yanac

A vulnerability classified as problematic has been found in python-pillow Pillow up to 12.2.x. This issue affects some unknown processing of the component TGA RLE Encoder. This manipulation of the argument buffer causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-59198. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More