It was discovered that Pillow incorrectly handled map stride valueswhen loading certain McIdas AREA images. An attacker could possiblyuse this issue to obtain sensitive information or cause a denial ofservice. (CVE-2026-54058)It was discovered that Pillow did not properly check for decompressionbombs when processing font files. An attacker could possibly use thisissue to cause Pillow to consume excessive memory, resulting in adenial of service. (CVE-2026-54059, CVE-2026-54060, CVE-2026-55379)It was discovered that Pillow did not properly check for decompressionbombs when loading GD image files. An attacker could possibly use thisissue to cause Pillow to consume excessive memory, resulting in adenial of service. (CVE-2026-55380)It was discovered that Pillow incorrectly validated filter sizes inthe rank filter implementation. An attacker could possibly use thisissue to cause Pillow to crash or execute arbitrary code.(CVE-2026-59197)It was discovered that Pillow incorrectly handled image coordinatecalculations. An attacker could possibly use this issue to causePillow to crash. (CVE-2026-59199)It was discovered that Pillow did not properly limit the size ofdecompressed PDF stream data. An attacker could possibly use thisissue to cause Pillow to consume excessive memory, resulting in adenial of service. (CVE-2026-59200)It was discovered that Pillow incorrectly parsed EPS files containinga negative byte count in the BeginBinary directive. An attacker couldpossibly use this issue to cause Pillow to hang, resulting in a denialof service. This issue only affected Ubuntu 26.04 LTS.(CVE-2026-59203)It was discovered that Pillow incorrectly accumulated JPEG2000 tilecomponent widths. An attacker could possibly use this issue to causePillow to consume excessive memory, resulting in a denial of service.(CVE-2026-59204)It was discovered that Pillow incorrectly validated image modecompatibility in color management transforms. An attacker couldpossibly use this issue to cause Pillow to crash or execute arbitrarycode. (CVE-2026-59205)