Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0.

A flaw was found in Pillow, a Python imaging library. A remote attacker could supply a specially crafted malicious PDF file, causing the application to hang indefinitely and consume 100% CPU. This vulnerability leads to a Denial of Service (DoS), making the application unresponsive.

Red Hat AI Inference Server 3.3 2026-05-11T00:00:00Z RHSA-2026:16008 rhaiis/model-opt-cuda-rhel9:1778244559 Red Hat AI Inference Server 3.3 2026-05-11T00:00:00Z RHSA-2026:16009 rhaiis/vllm-rocm-rhel9:1778244531 Red Hat AI Inference Server 3.3 2026-05-11T00:00:00Z RHSA-2026:16030 rhaiis/vllm-cuda-rhel9:1778274666 Exploit Intelligence Out of support scope exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-ocp-rag-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-service-api-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-tpu-rhel9 Red Hat Ansible Automation Platform 2 Out of support scope ansible-automation-platform-25/lightspeed-chatbot-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/hub-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform/automation-dashboard-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-aws-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-azure-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-azure-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-gcp-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/disk-image-cuda-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-caikit-nlp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-caikit-tgis-serving-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-agent-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-controller-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-router-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-storage-initializer-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llm-d-inference-scheduler-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-openvino-model-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-training-cuda128-torch29-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-training-rocm64-torch29-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-nemo-guardrails-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-vllm-cuda-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-vllm-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-vllm-rocm-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 Red Hat Quay 3 Out of support scope quay/quay-rhel8 Red Hat Quay 3 Fix deferred quay/quay-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-42310 https://nvd.nist.gov/vuln/detail/CVE-2026-42310 https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468 https://github.com/python-pillow/Pillow/pull/9519 https://github.com/python-pillow/Pillow/releases/tag/12.2.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7