CVE-2026-54060 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

What is CVE-2026-54060?

CVE-2026-54060 is a high-severity vulnerability in Python Pillow, published on 6 Jul 2026.

Official description

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.

Weakness: CWE-789

Which versions are affected by CVE-2026-54060?

4 open source packages ship an affected version, including pillow. It affects 1 product.

Products include Python Pillow.

How do I fix CVE-2026-54060?

Upgrade pillow to 12.3.0 or later.

Is CVE-2026-54060 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-54060 exists.

Other vulnerabilities in Python Pillow

• CVE-2014-3007 Pillow command injection Critical 10.0
• CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions Critical 9.8
• CVE-2022-30595 Buffer over-flow in Pillow Critical 9.8
• CVE-2021-25289 Out of bounds write in Pillow Critical 9.8
• CVE-2016-4009 Pillow Integer overflow in ImagingResampleHorizontal Critical 9.8

All Python Pillow vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-pillow-2026-54060, DEBIAN-CVE-2026-54060, ECHO-5869-a17c-a77f, GHSA-5x94-69rx-g8h2, MINI-224j-7q28-cv7c, MINI-48jr-3253-pv57 and 12 more.