Skip to content
Fencer Vulns
high 7.5

CVE-2026-40192 json

Pillow is vulnerable to a FITS GZIP decompression bomb

published 2026-04-13 6 mo ago modified 2026-10-26 13 d ago also BIT-pillow-2026-40192 , EUVD-2026-23130 , GHSA-whj4-6x5x-4v2j , PYSEC-2026-2250

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 52%
public exploits
0
none known

Summary

Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround.

Patch / fix

  • pypi pillow 12.2.0
  • bitnami pillow 12.2.0
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:12.2.0-1.el8ap
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:12.2.0-1.el9ap
  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 0:12.2.0-1.el9ap
  • Red Hat Red Hat Satellite 6.16 for RHEL 8 0:12.2.0-1.el8pc
  • Red Hat Red Hat Satellite 6.16 for RHEL 9 0:12.2.0-1.el9pc
  • Red Hat Red Hat Satellite 6.17 for RHEL 9 0:12.2.0-1.el9pc
  • Red Hat Red Hat Satellite 6.18 for RHEL 9 0:12.2.0-1.el9pc
  • Red Hat Red Hat Satellite 6.19 for RHEL 9 0:12.2.0-1.el9pc
  • Red Hat Red Hat AI Inference Server 3.2 1787772157, 1787860580, 1787884873
  • Red Hat Red Hat AI Inference Server 3.3 1778244531, 1778244546, 1778244559, 1778274666
  • Red Hat Red Hat AI Inference Server 3.4 1787151840
  • Red Hat Red Hat Ansible Automation Platform 2.6 1779761061, 1780102732
  • Red Hat Red Hat Enterprise Linux AI 3.3 1778666122, 1778666124, 1778677632, 1778677633, 1778677745, 1778690639
  • Red Hat Red Hat OpenShift AI 2.25 1780388133, 1786711151
  • Red Hat Red Hat OpenShift AI 3.3 1778262893, 1778263054, 1778263128, 1778677667, 1778677692, 1778677701, 1778677716, 1778677717, 1778677718, 1778677722, 1778677734, 1778677741, 1778677767, 1778677779, 1778782933, 1779123334, 1782471606, 1782472374
  • Red Hat Red Hat Quay 3.10 1779822261
  • Red Hat Red Hat Quay 3.12 1779811412
  • Red Hat Red Hat Quay 3.14 1779689392
  • Red Hat Red Hat Quay 3.15 1780891395
  • Red Hat Red Hat Quay 3.16 1779204086
  • Red Hat Red Hat Quay 3.17 1779922205
  • Red Hat Red Hat Quay 3.9 1779811473
  • pillow Debian 13 11.1.0-5+deb13u2
  • pillow Debian 14 12.2.0-1

debian advisories DEBIAN-CVE-2026-40192

  • pillow Ubuntu 25.10 11.3.0-1ubuntu1.2
  • pillow Ubuntu 26.04 LTS 12.1.1-2ubuntu1.1

ubuntu advisories UBUNTU-CVE-2026-40192

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • foreman satellite utils 6.18, satellite capsule 6.18, satellite 6.18 3.16.0.17-1.el9sat
  • foreman-cli satellite utils 6.18, satellite 6.18 3.16.0.17-1.el9sat
  • foreman-ec2 satellite 6.18 3.16.0.17-1.el9sat
  • foreman-pcp satellite capsule 6.18, satellite 6.18 3.16.0.17-1.el9sat
  • foreman-redis satellite 6.18 3.16.0.17-1.el9sat
  • foreman-vmware satellite 6.18 3.16.0.17-1.el9sat
  • foreman-libvirt satellite 6.18 3.16.0.17-1.el9sat
  • foreman-service satellite 6.18 3.16.0.17-1.el9sat

red hat advisories RHSA-2026:34368RHSA-2026:34365RHSA-2026:34366RHSA-2026:27076RHSA-2026:24762RHSA-2026:24761

  • python-Pillow openSUSE Leap 16.0 11.3.0-160000.4.1
  • python-Pillow openSUSE Tumbleweed 12.2.0-2.1

opensuse advisories openSUSE-SU-2026:20617-1openSUSE-SU-2026:10575-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-40192 updated cvss 7.5

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing

  • Red Hat Lightspeed Core lightspeed-core/rag-tool-rhel9 Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-service-api-rhel9, openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
    affected: workaround, no fix available
  • Red Hat AI Inference Server rhaiis/vllm-cpu-rhel9, rhaiis/vllm-tpu-rhel9, rhaiis/vllm-neuron-rhel9 Red Hat Ansible Automation Platform 2 ansible-automation-platform-25/lightspeed-chatbot-rhel8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Enterprise Linux 7 python-pillow, python-pillow-qt, python-pillow-tk, python-pillow-sane
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 8 python-pillow, python3-pillow, python3-pillow-tk
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-vllm-cuda-rhel9, rhoai/odh-vllm-gaudi-rhel9, rhoai/odh-llama-stack-core-rhel9, rhoai/odh-openvino-model-server-rhel9, rhoai/odh-llm-d-inference-scheduler-rhel9
    affected: workaround, no fix available
  • Red Hat AI Inference Server 3.2 rhaiis/vllm-cuda-rhel9 1787860580, rhaiis/vllm-rocm-rhel9 1787884873, rhaiis/model-opt-cuda-rhel9 1787772157
    fixed: vendor fix RHSA-2026:61628
  • Red Hat AI Inference Server 3.3 rhaiis 1778244531, rhaiis 1778244546, rhaiis 1778244559, rhaiis 1778274666
    fixed: vendor fix RHSA-2026:16008
  • Red Hat AI Inference Server 3.4 rhaii/vllm-spyre-rhel9 1787151840
    fixed: vendor fix RHSA-2026:57387
show 20 more
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8 python3.12-pillow 12.2.0-1.el8ap Red Hat Ansible Automation Platform 2.5 for RHEL 9 python3.12-pillow 12.2.0-1.el9ap
    fixed: vendor fix RHSA-2026:24761
  • Red Hat Ansible Automation Platform 2.6 ansible-automation-platform-26/hub-rhel9 1779761061, ansible-automation-platform-26/lightspeed-chatbot-rhel9 1780102732
    fixed: vendor fix RHSA-2026:24866
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9 python3.12-pillow 12.2.0-1.el9ap
    fixed: vendor fix RHSA-2026:24762
  • Red Hat Enterprise Linux AI 3.3 rhelai3 1778666122, rhelai3 1778666124, rhelai3 1778677632, rhelai3 1778677633, rhelai3 1778677745, rhelai3 1778690639
    fixed: vendor fix RHSA-2026:17611
  • Red Hat OpenShift AI 2.25 rhoai/odh-vllm-rocm-rhel9 1786711151, rhoai/odh-caikit-tgis-serving-rhel9 1780388133
    fixed: vendor fix RHSA-2026:24977
  • Red Hat OpenShift AI 3.3 rhoai 1778262893, rhoai 1778263054, rhoai 1778263128, rhoai 1778677667, rhoai 1778677692, rhoai 1778677701, +12 more
    fixed: vendor fix RHSA-2026:19712
  • Red Hat Quay 3.9 quay/quay-rhel8 1779811473
    fixed: vendor fix RHSA-2026:23361
  • Red Hat Quay 3.10 quay/quay-rhel8 1779822261
    fixed: vendor fix RHSA-2026:22840
  • Red Hat Quay 3.12 quay/quay-rhel8 1779811412
    fixed: vendor fix RHSA-2026:22629
  • Red Hat Quay 3.14 quay/quay-rhel8 1779689392
    fixed: vendor fix RHSA-2026:21017
  • Red Hat Quay 3.15 quay/quay-rhel8 1780891395
    fixed: vendor fix RHSA-2026:24853
  • Red Hat Quay 3.16 quay 1779204086
    fixed: vendor fix RHSA-2026:19375
  • Red Hat Quay 3.17 quay/quay-rhel9 1779922205
    fixed: vendor fix RHSA-2026:22465
  • Red Hat Satellite 6.16 for RHEL 8 python-pillow 12.2.0-1.el8pc, python3.11-pillow 12.2.0-1.el8pc Red Hat Satellite 6.16 for RHEL 9 python-pillow 12.2.0-1.el9pc, python3.11-pillow 12.2.0-1.el9pc
    fixed: vendor fix RHSA-2026:27076
  • Red Hat Satellite 6.17 for RHEL 9 python-pillow 12.2.0-1.el9pc, python3.11-pillow 12.2.0-1.el9pc
    fixed: vendor fix RHSA-2026:34366
  • Red Hat Satellite 6.18 for RHEL 9 python3.12-pillow 12.2.0-1.el9pc
    fixed: vendor fix RHSA-2026:34368
  • Red Hat Satellite 6.19 for RHEL 9 python3.12-pillow 12.2.0-1.el9pc
    fixed: vendor fix RHSA-2026:34365
  • Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-ocp-rag-rhel9 Red Hat Ansible Automation Platform 2 python-pillow Red Hat Ansible Automation Platform 2.5 for RHEL 8 receptor 1.6.5-1.el8ap, receptorctl 1.6.5-1.el8ap, automation-hub 4.10.15-1.el8ap, python3.12-click 8.3.3-1.el8ap, python3.12-pulpcore 3.49.61-1.el8ap, automation-controller 4.6.29-2.el8ap, +12 more Red Hat Ansible Automation Platform 2.5 for RHEL 9 receptor 1.6.5-1.el9ap, receptorctl 1.6.5-1.el9ap, automation-hub 4.10.15-1.el9ap, python3.12-click 8.3.3-1.el9ap, python3.12-pulpcore 3.49.61-1.el9ap, automation-controller 4.6.29-2.el9ap, +12 more Red Hat Ansible Automation Platform 2.6 ansible-automation-platform-26/gateway-rhel9 1779773804, ansible-automation-platform-26/hub-web-rhel9 1779765164, ansible-automation-platform-26/receptor-rhel9 1779770938, ansible-automation-platform-26/mcp-tools-rhel9 1779772877, ansible-automation-platform-26/controller-rhel9 1779762270, ansible-automation-platform-26/de-minimal-rhel9 1779774688, +22 more Red Hat Ansible Automation Platform 2.6 for RHEL 9 receptor 1.6.5-1.el9ap, molecule 26.4.0-2.el9ap, receptorctl 1.6.5-1.el9ap, ansible-sign 0.1.5-1.el9ap, ansible-lint 26.4.0-1.el9ap, automation-hub 4.11.9-1.el9ap, +37 more
    +1 more products
    Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor 1.6.5-1.el10ap, molecule 26.4.0-2.el10ap, receptorctl 1.6.5-1.el10ap, ansible-sign 0.1.5-1.el10ap, python-click 8.3.3-1.el10ap, ansible-lint 26.4.0-1.el10ap, +12 more
    not affected: vulnerable code not present
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-mlflow-rhel9, rhoai/odh-caikit-nlp-rhel9, rhoai/odh-kserve-agent-rhel9, rhoai/odh-kserve-router-rhel9, rhoai/odh-kserve-controller-rhel9, rhoai/odh-kserve-storage-initializer-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift AI 2.25 rhoai/odh-rhel9-operator 1780513840, rhoai/odh-rhel9-operator 1788331391, rhoai/odh-vllm-cpu-rhel9 1780069252, rhoai/odh-vllm-cpu-rhel9 1786712073, rhoai/odh-dashboard-rhel9 1780467029, rhoai/odh-dashboard-rhel9 1788312226, +146 more Red Hat OpenShift AI 3.3 rhoai 1778239104, rhoai 1778262829, rhoai 1778262856, rhoai 1778262907, rhoai 1778262952, rhoai 1778262982, +141 more Red Hat Quay 3.9 quay/clair-rhel8 1779233282, quay/quay-builder-rhel8 1779233301, quay/quay-operator-rhel8 1779233286, quay/quay-operator-bundle 1779815781, quay/quay-bridge-operator-rhel8 1779233279, quay/quay-bridge-operator-bundle 1779233747, +3 more
    not affected: vulnerable code not present

11 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
6 mo ago

Exploit prediction

0.67% chance of exploitation in the next 30 days, higher than 52% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CISA ADP 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
GitHub 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
OSV 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected packages

ecosystem package affected fixed in
pypi pillow
>=10.3.0, <12.2.0
12.2.0
bitnami pillow
>=10.3.0, <12.2.0
12.2.0

Affected products

  • python-pillow Pillow
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Red Hat AI Inference Server 3.2
  • Red Hat Red Hat AI Inference Server 3.3
  • Red Hat Red Hat AI Inference Server 3.4
  • Red Hat Red Hat Ansible Automation Platform 2.6
  • Red Hat Red Hat Enterprise Linux AI 3.3
  • Red Hat Red Hat OpenShift AI 2.25
  • Red Hat Red Hat OpenShift AI 3.3
  • Red Hat Red Hat Quay 3.10
  • Red Hat Red Hat Quay 3.12
  • Red Hat Red Hat Quay 3.14
  • Red Hat Red Hat Quay 3.15
  • Red Hat Red Hat Quay 3.16
  • Red Hat Red Hat Quay 3.17
  • Red Hat Red Hat Quay 3.9
  • Red Hat Lightspeed Core
  • Red Hat OpenShift Lightspeed
  • Red Hat Red Hat AI Inference Server
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat OpenShift AI (RHOAI)

Classification

Weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling
  • CWE-400 Uncontrolled Resource Consumption
  • CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.