Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112899— Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

Quick assessment

Affected
python-pillow Pillow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Pillow 是一个 Python 图像处理库。在 2.3.0 到 12.3.0 版本中，EPS 渲染功能在调用 Ghostscript 之前，未对缩放后的图像尺寸进行验证。如果应用程序使用大于 1 的应用程序选定缩放比例来处理不可信的 EPS 或 PostScript 文件，则可能导致 Ghostscript 过度消耗 CPU 和临时磁盘资源。在具备“解压炸弹”防护的版本中，缩放后的输出仅在 Ghostscript 完成渲染后才进行检查，因此资源消耗可能超出配置的像素限制。该问题的放大效应取决于应用程序所选的缩放

CVSS 6.3 · Medium

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112899

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
Source: CVE Program / CVE List V5
Vulnerability Description
Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image dimensions before invoking Ghostscript. Applications that process untrusted EPS or PostScript files using an application-selected scale greater than one can incur excessive Ghostscript CPU and temporary disk consumption. In versions with decompression-bomb protection, the scaled output is checked only after Ghostscript has completed rendering, allowing resource consumption beyond the configured pixel limit. The amplification depends on the scale selected by the application, not an attacker-controlled scale value. This issue is fixed in version 13.0.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
python-pillow Pillow >= 2.5.0, < 13.0.0 -

II. Public POCs for CVE-2026-112899

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112899

请登录查看更多情报信息。

Vendor Pages for CVE-2026-112899 (1)

Other References for CVE-2026-112899 (3)

IV. Related Vulnerabilities

Same product: Pillow
Same vendor: python-pillow
Same weakness: CWE-770