High [CVE-2026-55380] Denial of Service via crafted GD 2.x image file
This high-severity Red Hat Linux advisory covers CVE-2026-55380 affecting Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted.gd file to trigger excessive C-heap allocation when loaded.
This issue is fixed in version 12.3.0. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file.
The GdImageFile._open() function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a Denial of Service (DoS) due to C-heap exhaustion.
A denial-of-service vulnerability was found in Pillow's GdImageFile plugin. The GdImageFile._open() function reads image dimensions from GD 2.x file headers and stores them without performing a decompression bomb check.
A crafted.gd file of approximately 1 KB can trigger an unchecked 4.3 GB C-heap allocation, potentially crashing the process or exhausting memory on systems with insufficient resources. Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Weakness: CWE-1285.
- < 12.3.0
Official advisory · high-confidence parse· fetched 12 days ago·verify at source
- 12.3.0
- python3.12-pillow-0:12.3.0-1.el8ap
- python3.12-pillow-0:12.3.0-1.el9ap
- python-pillow-0:5.1.1-22.el8_10
- python-pillow-0:5.1.1-15.el8_4.2
- python-pillow-0:5.1.1-20.el8_6
- python-pillow-0:5.1.1-20.el8_8
- python-pillow-0:12.3.0-1.el8pc
- python-pillow-0:12.3.0-1.el9pc
- python3.12-pillow-0:12.3.0-1.el9pc
- rhaiis/vllm-cuda-rhel9:1787860580
- rhaiis/model-opt-cuda-rhel9:1787772157
- rhaiis/vllm-rocm-rhel9:1787884873
- rhaiis/model-opt-cuda-rhel9:1787601159
- rhaii/vllm-spyre-rhel9:1789681201
- rhaii/vllm-cpu-rhel9:1789681128
- rhaii/vllm-cuda-rhel9:1789681126
- rhaii/model-opt-cuda-rhel9:1789681126
- rhaii/vllm-rocm-rhel9:1789681126
- ansible-automation-platform-26/hub-rhel9:1785753568
- ansible-automation-platform-26/lightspeed-chatbot-rhel9:1785646188
- ansible-automation-platform-27/hub-rhel9:1785376164
- ansible-automation-platform-27/lightspeed-chatbot-rhel9:1785426734
- rhelai3/disk-image-cuda-rhel9:1788290314
- rhelai3/bootc-aws-cuda-rhel9:1788273908
- rhelai3/bootc-azure-cuda-rhel9:1788273909
- rhelai3/bootc-cuda-rhel9:1788260684
- rhelai3/bootc-gcp-cuda-rhel9:1788273977
- rhoai/odh-automl-rhel9:1786612415
- rhoai/odh-autorag-rhel9:1786612637
- rhoai/odh-llama-stack-core-rhel9:1786635926
- rhoai/odh-llm-d-kv-cache-rhel9:1787169432
- rhoai/odh-openvino-model-server-rhel9:1787303251
- rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1787073866
- rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1787073873
- rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1787073459
- rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1787073611
- rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1787073451
- rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1787073451
- rhoai/odh-th06-cpu-torch210-py312-rhel9:1787076778
- rhoai/odh-th06-cuda130-torch210-py312-rhel9:1787077779
- RHSA-2026:50319
- RHSA-2026:50336
- RHSA-2026:39127
- RHSA-2026:52551
- RHSA-2026:48760
- RHSA-2026:48759
- RHSA-2026:50223
- RHSA-2026:50222
- RHSA-2026:50263
Official advisory · high-confidence parse· fetched 12 days ago·verify at source
Mitigation checklist
- Avoid processing untrusted GD 2.x image files with PIL.GdImageFile.open(). Use Image.open() instead, which includes decompression bomb protections for supported formats. If GdImageFile must be used, validate the image dimensions before calling load(). Restricting accepted image formats at the application boundary to only those explicitly needed can reduce exposure.
Official advisory · high-confidence parse· fetched 12 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.