chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v12.3.0 [SECURITY] by renovate-bot · Pull Request #595 · GoogleCloudPlatform/cloud-solutions

renovate-bot · 2026-07-07T14:35:32Z

This PR contains the following updates:

Package	Change	Age	Confidence
pillow (changelog)	`12.2.0` → `12.3.0`

Pillow affected by out-of-bounds write when loading PSD images

BIT-pillow-2026-25990 / CVE-2026-25990 / GHSA-cfh3-3jmp-rvhc

More information

Details

Impact

An out-of-bounds write may be triggered when loading a specially crafted PSD image. Pillow >= 10.3.0 users are affected.

Patches

Pillow 12.1.1 will be released shortly with a fix for this.

Workarounds

Image.open() has a formats parameter that can be used to prevent PSD images from being opened.

References

Pillow 12.1.1 will add release notes at https://pillow.readthedocs.io/en/stable/releasenotes/index.html

Severity

CVSS Score: 8.6 / 10 (High)
Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Pillow has a heap buffer overflow with nested list coordinates

BIT-pillow-2026-42309 / CVE-2026-42309 / GHSA-5xmw-vc9v-4wf2

More information

Details

Passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polygon and ImageDraw.ImageDraw.line could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This was introduced in Pillow 11.2.1.

Severity

CVSS Score: 5.1 / 10 (Medium)
Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

BIT-pillow-2026-42311 / CVE-2026-42311 / GHSA-pwv6-vv43-88gr

More information

Details

Impact

Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.

Patches

Patched version: 12.2.0

Pillow 12.1.1 addressed CVE-2026-25990 by adding checks for tile extents in PSD image decoding/encoding to prevent an out-of-bounds write. However, the bounds checks computed tile extent sums using types susceptible to integer overflow, meaning a PSD image with carefully chosen tile dimensions could produce values that wrap around and bypass the checks, still triggering an out-of-bounds write in src/decode.c and src/encode.c. The fix avoids adding extents together before comparison.

Workarounds

Use any version but affected versions: >= 10.3.0, < 12.2.0

Resources

Fix: https://github.com/python-pillow/Pillow/pull/9520
Original issue: CVE-2026-25990 (Pillow 12.1.1)

Severity

CVSS Score: 8.6 / 10 (High)
Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

BIT-pillow-2026-42310 / CVE-2026-42310 / GHSA-r73j-pqj5-w3x7

More information

Details

Impact

An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive.

Patches

Patched version: 12.2.0.

PdfParser (introduced in Pillow 4.2.0) follows Prev pointers in PDF trailers to read cross-reference sections. If a
trailer's Prev pointer references an offset that has already been processed — either pointing to itself or forming a
longer cycle — the parser enters an infinite loop. Pillow now tracks previously processed trailer offsets and raises an
error if a cycle is detected.

Workarounds

Use any version but the affected versions: >= 4.2.0, < 12.2.0

Resources

Fix: https://github.com/python-pillow/Pillow/pull/9519

Severity

CVSS Score: 5.1 / 10 (Medium)
Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

FITS GZIP decompression bomb in Pillow

BIT-pillow-2026-40192 / CVE-2026-40192 / GHSA-whj4-6x5x-4v2j

More information

Details

Impact

Pillow did not limit the amount of GZIP-compressed data read when decoding a FITS image, making it vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation).

Patches

The amount of data read is now limited to the necessary amount.
Fixed in Pillow 12.2.0 (PR #9521).

Workarounds

Avoid Pillow >= 10.3.0, < 12.2.0
Only open specific image formats, excluding FITS.

Severity

CVSS Score: 8.7 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Pillow has an integer overflow when processing fonts

BIT-pillow-2026-42308 / CVE-2026-42308 / GHSA-wjx4-4jcj-g98j / PYSEC-2026-165

More information

Details

If a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This has been fixed.

Severity

CVSS Score: 5.1 / 10 (Medium)
Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

BIT-pillow-2026-42308 / CVE-2026-42308 / GHSA-wjx4-4jcj-g98j / PYSEC-2026-165

More information

Details

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

Severity

CVSS Score: 5.5 / 10 (Medium)
Vector String: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

Release Notes

python-pillow/Pillow (pillow)

`v12.3.0`

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]
Add security release notes #9741 [@radarhere]
Add release notes for Python 3.15 beta wheels #9696 [@radarhere]
ImageFont can also be used with ImageText #9597 [@radarhere]
Additional guidelines for security reports #9659 [@wiredfool]
Fixed typo #9636 [@radarhere]
Added CVEs to 12.2.0 release notes #9591 [@radarhere]
Revise development support information in README #9583 [@aclark4life]
Add INCIDENT_RESPONSE.md #9555 [@aclark4life]
Add STRIDE threat model to security docs #9562 [@aclark4life]
Add CVEs to 12.2.0 release notes #9556 [@radarhere]
Update README with revised security policy #9553 [@radarhere]
Update security policy #9552 [@aclark4life]
Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]
Update github-actions #9655 [@renovate[bot]]
Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]
Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]
Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]
Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]
Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]
Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]
Update dependency harfbuzz to v14 #9610 [@renovate[bot]]
Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]
Update github-actions #9611 [@renovate[bot]]
Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]
Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]
Updated raqm to 0.10.5 #9557 [@radarhere]
Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]
Remove references to libavif patch #9734 [@radarhere]
Add benchmark tests #9654 [@akx]
Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]
Add dependencies.json to Windows cache key #9721 [@radarhere]
Increase AVIF test epsilon for loong64 #9714 [@wszqkzqk]
Add colour to Linux and Windows wheel build logs #9677 [@hugovk]
Do not test NumPy against Python 3.15 Windows AMD64 wheels #9674 [@radarhere]
Run pyroma in tox -e lint instead of pytest #9670 [@hugovk]
Update Ghostscript to 10.7.1 #9634 [@radarhere]
Update free-threading CI #9625 [@hugovk]
Increase AVIF test epsilon for riscv64 #9606 [@radarhere]
Add Fedora 44 #9594 [@radarhere]
Test Ubuntu 26.04 LTS (Resolute Raccoon) #9587 [@hugovk]
Skip EPS test_1 for Ghostscript 10.06.0 #9588 [@radarhere]
Catch subprocess.CalledProcessError in test_grab_x11 #9578 [@radarhere]
Correct feature name #9542 [@radarhere]
Skip test if FreeType is not available #9540 [@radarhere]
Remove type hint ignore #9538 [@radarhere]
Update macOS tested Python versions #9534 [@radarhere]
Remove Debian 12 and Fedora 42 from CI #9530 [@hugovk]
Remove manylinux2014 and Amazon Linux 2 #9528 [@radarhere]

Type hints

Use NumPy 2.4.6 for mypy #9705 [@radarhere]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update putpixel type hint to allow lists in xy #9585 [@radarhere]
Remove type hint ignore #9538 [@radarhere]

Other changes

Speed up ImageChops operations #9738 [@akx]
Speed up Image.filter() #9736 [@akx]
Speed up Image.getchannel(), Image.merge(), Image.putalpha() and Image.split() #9675 [@akx]
Speed up Image.fill(), Image.linear_gradient() and Image.radial_gradient(). #9737 [@akx]
Speed up Image.resample() #9739 [@akx]
Speed up alpha_composite, matrix, negative, quantize #9740 [@akx]
Remove PyErr_Clear() of "weird" exceptions #9730 [@radarhere]
Check realloc return value #9722 [@radarhere]
Add max_length to PdfStream decode() #9718 [@radarhere]
Return early when there is no fill region #9732 [@radarhere]
Allow error to be raised if PyDict_SetItemString fails #9731 [@radarhere]
Speed up Image.blend() #9649 [@akx]
Raise OverflowError if number of vertices is too large for Path #9729 [@radarhere]
Remove unused HSV and LAB matrix conversion from C #9724 [@radarhere]
Prevent reusing ImagingDecoderObject.setimage #9656 [@Serotav]
Raise ValueError if FPX tile size is not 64px by 64px #9660 [@radarhere]
Only clear error if it is BufferError #9727 [@radarhere]
Apply XOR mask to 1 and L mode CUR images #9641 [@radarhere]
Do not raise error from unknown channel ID when parsing PSD layers #9644 [@radarhere]
Raise ValueError if P;2L or P;4L data is truncated in frombytes() #9725 [@radarhere]
Embed SBOM into wheels #9679 [@hugovk]
Do not set eval() globals in ImageMath.unsafe_eval() #9576 [@radarhere]
Add Tcl/Tk license to wheels #9663 [@radarhere]
Ensure map stride is at least one full row of pixels #9719 [@radarhere]
Raise OverflowError if text width exceeds INT_MAX #9717 [@radarhere]
Raise error if image modes do not match ImageCms transform modes #9715 [@radarhere]
Use int64_t for text height #9716 [@radarhere]
Return if error occurs in Py_mod_exec slot #9712 [@radarhere]
Add decompression bomb checks to FontFile classes #9711 [@radarhere]
If C error is raised, return NULL #9706 [@radarhere]
Prevent saving 1 mode images as TGA with run-length encoding #9709 [@radarhere]
Raise ValueError if EPS BeginBinary bytecount is negative #9708 [@radarhere]
Do not DECREF tuple until tuple items are no longer used #9707 [@radarhere]
Do not update NumPy automatically #9713 [@radarhere]
Simplified code #9642 [@radarhere]
If realloc fails, do not reduce block size #9702 [@radarhere]
DECREF PyDict_GetItemRef result #9701 [@radarhere]
Use int64_t to calculate paste box dimensions #9703 [@radarhere]
Calculate JPEG2000 total_component_width for each tile in isolation #9704 [@radarhere]
Raise ValueError if value is not bytes for TIFF_BYTE or TIFF_ASCII tag #9699 [@radarhere]
Release Py_Buffer on error #9698 [@radarhere]
Use os.startfile() in WindowsViewer show_file() #9692 [@radarhere]
Validate large filter sizes when initializing RankFilter #9695 [@radarhere]
Add decompression bomb check to GdImageFile #9693 [@radarhere]
Free image bands when an error occurs while splitting an image #9694 [@radarhere]
Check PyList_Append return value #9690 [@radarhere]
Check WebPMuxNew return value #9689 [@radarhere]
Check PyCapsule_New return value #9691 [@radarhere]
Do not return negative width for text length #9623 [@radarhere]
Add args argument to METH_NOARGS methods #9687 [@radarhere]
Check ImagingNewDirty return value #9688 [@radarhere]
Use int64_t for text width #9686 [@radarhere]
Move PyDateTime_IMPORT inside Py_mod_exec slot #9580 [@radarhere]
Validate size and rank when initializing RankFilter #9661 [@radarhere]
Raise ValueError if insufficient data is read from DDS RGB file #9405 [@radarhere]
Correct IFDRational.__float__() return value #9676 [@nyxst4ck]
Correct length when accessing ImagePath.Path subscript #9685 [@radarhere]
Release reference on non-flattened sequence error #9684 [@radarhere]
Do not release Py_buffer until buf is no longer in use #9683 [@radarhere]
Do not resize macOS retina screenshots by default #9266 [@radarhere]
Add abstract BaseImageFont class #9595 [@radarhere]
Cast before multiplying #9678 [@radarhere]
Limit radius to half width or height of rounded rectangle #9561 [@radarhere]
linesize is always xsize multiplied by pixelsize #9647 [@radarhere]
Check annotate_hash_table return value #9572 [@radarhere]
Catch KeyError when checking mode from PNG IHDR chunk #9604 [@radarhere]
Only pass one argument to C expand #9664 [@radarhere]
Raise error if declared JPEG2000 marker length is too small #9666 [@radarhere]
In _dump(), use Python PPM save, instead of C #9566 [@radarhere]
Raise error consistently from inside ImagingNewArrow #9571 [@radarhere]
Simplify RankFilter.c check #9662 [@radarhere]
Support opening and saving L mode AVIF images with libavif >= 1.3.0 #9471 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9648 [@pre-commit-ci[bot]]
Apply libtiff patch to fix CVE-2026-4775 #9646 [@radarhere]
Remove duplicate code #9640 [@radarhere]
Switch iOS back to macos-26-intel #9631 [@radarhere]
Don't use list as default in PdfParser read_prev_trailer #9629 [@danigm]
Add support for Python 3.15 #9624 [@radarhere]
Do not draw line or arc if width is zero #9589 [@radarhere]
Use _accept check in WebP _open #9605 [@radarhere]
Compare dist sizes vs latest PyPI release #9621 [@hugovk]
Do not generate SBOM in scheduled run on fork #9620 [@radarhere]
Use plugin method directly when saving PDFs #9547 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9617 [@pre-commit-ci[bot]]
Set Renovate prCreation to not-pending #9616 [@radarhere]
Raise error if PNG transparency has incorrect type or length when saving #9536 [@radarhere]
If PdfParser buffer is memoryview, release it when closing #9596 [@radarhere]
Correct integer overflow in 16-bit resampling #9480 [@hayatoikoma]
SBOM: Use real versions from dependencies.json #9593 [@hugovk]
Restrict SBOM upload to only Pillow JSON #9598 [@radarhere]
Generate CycloneDX SBOM at release time via CI #9550 [@aclark4life]
Raise ValueError if ImageOps border has unsupported format #9426 [@veeceey]
Unsafe pointer dereference from unchecked Python integer in Tk initialization #9548 [@barttran2k]
Reorder renovate.json #9565 [@radarhere]
Add python-pillow GitHub Sponsors to FUNDING.yml #9563 [@aclark4life]
Correct environment URL #9558 [@radarhere]
Remove or protect secrets in Actions #9544 [@pre-commit-ci[bot]]
Move Homebrew dependencies into Brewfile #9546 [@hugovk]
Do not precompute horizontal coefficients if not horizontal resizing #9543 [@radarhere]
Fix comparison warnings #9541 [@radarhere]
Close PdfParser if error occurs during init #9539 [@radarhere]
Drop experimental Python 3.13 free-threaded wheels #9535 [@radarhere]
Update github-actions #9533 [@renovate[bot]]

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…2.3.0 [SECURITY]

renovate-bot requested a review from zunhoyi as a code owner July 7, 2026 14:35

forking-renovate Bot added dependencies Pull requests that update a dependency file p0 SECURITY labels Jul 7, 2026

chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v1…

8f4eb22

…2.3.0 [SECURITY]

renovate-bot force-pushed the renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts branch from 068a207 to 8f4eb22 Compare July 7, 2026 14:40

ferrarimarco assigned zunhoyi Jul 7, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v12.3.0 [SECURITY]#595

chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v12.3.0 [SECURITY]#595
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts

renovate-bot commented Jul 7, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate-bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Pillow affected by out-of-bounds write when loading PSD images

Details

Impact

Patches

Workarounds

References

Severity

References

Pillow has a heap buffer overflow with nested list coordinates

Details

Severity

References

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Details

Impact

Patches

Workarounds

Resources

Severity

References

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

Details

Impact

Patches

Workarounds

Resources

Severity

References

FITS GZIP decompression bomb in Pillow

Details

Impact

Patches

Workarounds

Severity

References

Pillow has an integer overflow when processing fonts

Details

Severity

References

BIT-pillow-2026-42308 / CVE-2026-42308 / GHSA-wjx4-4jcj-g98j / PYSEC-2026-165

Details

Severity

References

Release Notes

v12.3.0

Removals

Documentation

Dependencies

Testing

Type hints

Other changes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate-bot commented Jul 7, 2026 •

edited

Loading

`v12.3.0`