pillow
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 196 advisory(ies) without a verdict
Advisories (196)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-22hg-r758-rrw9 Pillow: Infinite loop in MIC n_frames when the embedded TIFF | 7.2.0 – < 13.0.0 | Undetermined |
| GHSA-24rc-8hj2-v98c Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode | 9.1.0 – < 13.0.0 | Undetermined |
| GHSA-254f-3936-288h Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() | 5.1.0 – < 13.0.0 | Undetermined |
| GHSA-27h8-gf7j-v5hc Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images | < 13.0.0 | Undetermined |
| GHSA-332p-7hrc-92wf Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO | 2.0.0 – < 13.0.0 | Undetermined |
| GHSA-3c5c-7235-994j Pillow buffer overflow in ImagingPcdDecode | < 3.1.1 | Undetermined |
| GHSA-3f63-hfp8-52jq Arbitrary Code Execution in Pillow | < 10.2.0 | Undetermined |
| GHSA-3j72-p6qg-6xp7 Pillow: TarIO negative size field causes infinite CPU-spin loop | < 13.0.0 | Undetermined |
| GHSA-3wvg-mj6g-m9cv Pillow Uncontrolled Resource Consumption | < 8.1.2 | Undetermined |
| GHSA-3xv8-3j54-hgrp Out-of-bounds read in Pillow | < 7.1.0 | Undetermined |
| GHSA-43fq-w8qq-v88h Out-of-bounds read in Pillow | < 7.1.0 | Undetermined |
| GHSA-44wm-f244-xhp3 Pillow buffer overflow vulnerability | < 10.3.0 | Undetermined |
| GHSA-4558-3h8r-v8xp Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size | < 13.0.0 | Undetermined |
| GHSA-45hq-cxwh-f6vc Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading | < 12.3.0 | Undetermined |
| GHSA-462x-pgg6-55fp Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290) | 8.2.0 – < 13.0.0 | Undetermined |
| GHSA-4fx9-vc88-q2xc Infinite loop in Pillow | < 9.0.0 | Undetermined |
| GHSA-4rm8-3hmm-39fg Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise | < 13.0.0 | Undetermined |
| GHSA-4rr5-89j8-mwwm Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer | 11.3.0 – < 13.0.0 | Undetermined |
| GHSA-4x4j-2g7c-83w6 Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path | < 12.3.0 | Undetermined |
| GHSA-57h3-9rgr-c24m Out of bounds write in Pillow | < 8.1.1 | Undetermined |
| GHSA-58r4-6rv3-gfh8 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image | < 13.0.0 | Undetermined |
| GHSA-5gm3-px64-rw72 Uncontrolled Resource Consumption in Pillow | < 6.2.2 | Undetermined |
| GHSA-5x8w-8jj5-q52h Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution | < 13.0.0 | Undetermined |
| GHSA-5x94-69rx-g8h2 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` | < 12.3.0 | Undetermined |
| GHSA-5xm2-6676-qcp9 Pillow: APNG background disposal allocates full canvas before decompression bomb check | 8.1.0 – < 13.0.0 | Undetermined |
| GHSA-5xmw-vc9v-4wf2 Pillow has a heap buffer overflow with nested list coordinates | 11.2.1 – < 12.2.0 | Undetermined |
| GHSA-62p4-gmf7-7g93 Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) | < 12.3.0 | Undetermined |
| GHSA-654x-cwwv-5j9c Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 | 11.2.1 – < 13.0.0 | Undetermined |
| GHSA-65qm-jvmh-6pqg Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS | 9.2.0 – < 13.0.0 | Undetermined |
| GHSA-6r8x-57c9-28j4 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow | < 12.3.0 | Undetermined |
| GHSA-74r2-7ff9-mjj2 Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() | 5.4.0 – < 13.0.0 | Undetermined |
| GHSA-7534-mm45-c74v Buffer Overflow in Pillow | < 8.3.0 | Undetermined |
| GHSA-77gc-v2xv-rvvh Out-of-bounds Read in Pillow | 2.4.0 – < 8.2.0 | Undetermined |
| GHSA-78g4-xqwv-q3g8 Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load() | 11.1.0 – < 13.0.0 | Undetermined |
| GHSA-7mwm-ghpf-9vrm Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform | < 13.0.0 | Undetermined |
| GHSA-7r7m-5h27-29hp Potential infinite loop in Pillow | < 8.2.0 | Undetermined |
| GHSA-8843-m7mw-mxqm Buffer overflow in Pillow | < 7.1.0 | Undetermined |
| GHSA-8g5g-8vmr-9782 Pillow: Heap buffer overflow in ImagingJpegDecode | < 13.0.0 | Undetermined |
| GHSA-8ghj-p4vj-mr35 Pillow Denial of Service vulnerability | < 10.0.0 | Undetermined |
| GHSA-8m9x-pxwq-j236 Pillow command injection | < 2.5.0 | Undetermined |
| GHSA-8v84-f9pq-wr9x Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading | < 12.3.0 | Undetermined |
| GHSA-8vj2-vxx3-667w Arbitrary expression injection in Pillow | < 9.0.1 | Undetermined |
| GHSA-8xjq-8fcg-g5hw Out-of-bounds Write in Pillow | < 8.1.1 | Undetermined |
| GHSA-8xjv-v9xq-m5h9 Pillow Buffer overflow in ImagingFliDecode | < 3.1.1 | Undetermined |
| GHSA-95q3-8gr9-gm8w Pillow Denial of Service by Uncontrolled Resource Consumption | < 8.1.2 | Undetermined |
| GHSA-98vv-pw6r-q6q4 Uncontrolled Resource Consumption in pillow | 5.2.0 – < 8.3.2 | Undetermined |
| GHSA-9hw9-ch79-4vh6 Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch | < 12.3.0 | Undetermined |
| GHSA-9hx2-hgq2-2g4f Regular Expression Denial of Service (ReDoS) in Pillow | 5.1.0 – < 8.1.1 | Undetermined |
| GHSA-9j59-75qj-795w Path traversal in Pillow | < 9.0.1 | Undetermined |
| GHSA-9v9v-9qvf-h2hj Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) | < 13.0.0 | Undetermined |
| GHSA-c6hw-5grf-ff96 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels | 8.1.0 – < 13.0.0 | Undetermined |
| GHSA-cfh3-3jmp-rvhc Pillow affected by out-of-bounds write when loading PSD images | 10.3.0 – < 12.1.1 | Undetermined |
| GHSA-cfmr-38g9-f2h7 Pillow denial of service via Crafted Block Size | < 2.3.2 ; 2.5 – < 2.5.2 | Undetermined |
| GHSA-cp9v-662q-vvx9 Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 | 12.0.0 – < 13.0.0 | Undetermined |
| GHSA-cqhg-xjhh-p8hf Out-of-bounds reads in Pillow | < 7.1.0 | Undetermined |
| GHSA-f2g6-542v-9j58 Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle | 5.1.0 – < 13.0.0 | Undetermined |
| GHSA-f4w8-cv6p-x6r5 Pillow Denial of Service by Uncontrolled Resource Consumption | < 8.1.2 | Undetermined |
| GHSA-f5g8-5qq7-938w Pillow Out-of-bounds Read | < 8.1.0 | Undetermined |
| GHSA-fc9g-5qg7-mf45 Pillow: Quadratic GIF comment copying during save | 9.2.0 – < 13.0.0 | Undetermined |
| GHSA-fj7v-r99m-22gq Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images | 5.2.0 – < 12.3.0 | Undetermined |
| GHSA-g4qv-2jxx-769h Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time | 11.0.0 – < 13.0.0 | Undetermined |
| GHSA-g6rj-rv7j-xwp4 Pillow denial of service | < 8.2.0 | Undetermined |
| GHSA-g7cr-3p24-7wf7 Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer | 9.4.0 – < 13.0.0 | Undetermined |
| GHSA-g842-9rc4-69pw Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS | < 13.0.0 | Undetermined |
| GHSA-gg2r-wvfm-q9rx Pillow: MSP RLE decoder expands a tiny file into unbounded memory | 4.1.0 – < 13.0.0 | Undetermined |
| GHSA-h5rf-vgqx-wjv2 Pillow denial of service via PNG bomb | < 2.7.0 | Undetermined |
| GHSA-hf64-x4gq-p99h Pillow Out-of-bounds Read | 4.3.0 – < 8.1.0 | Undetermined |
| GHSA-hggx-3h72-49ww Pillow Buffer overflow in ImagingLibTiffDecode | < 3.1.1 | Undetermined |
| GHSA-hj69-c76v-86wr Out-of-bounds Read in Pillow | < 6.2.2 | Undetermined |
| GHSA-hjfx-8p6c-g7gx Insufficient Verification of Data Authenticity in Pillow | 5.1.0 – < 8.2.0 | Undetermined |
| GHSA-hr8g-f6r6-mr22 Buffer over-flow in Pillow | 9.1.0 – < 9.1.1 | Undetermined |
| GHSA-hvr8-466p-75rh Pillow Integer overflow in ImagingResampleHorizontal | < 3.1.1 | Undetermined |
| GHSA-j4m9-6w36-pw47 Pillow: Invalid free in FreeType glyph rendering when a stroker is active | 10.0.0 – < 13.0.0 | Undetermined |
| GHSA-j6f7-g425-4gmx Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin | < 2.5.3 | Undetermined |
| GHSA-j7hp-h8jx-5ppr libwebp: OOB write in BuildHuffmanTable | < 10.0.1 | Undetermined |
| GHSA-j7mj-748x-7p78 DOS attack in Pillow when processing specially crafted image files | < 6.2.0 | Undetermined |
| GHSA-jg86-v3jv-hrpm Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) | 5.1.0 – < 13.0.0 | Undetermined |
| GHSA-jjj6-mw9f-p565 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() | 5.1.0 – < 12.3.0 | Undetermined |
| GHSA-m2vv-5vj5-2hm7 Pillow vulnerable to Data Amplification attack. | < 9.2.0 | Undetermined |
| GHSA-mrfp-p49p-3hf2 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion | 5.1.0 – < 13.0.0 | Undetermined |
| GHSA-mvg9-xffr-p774 Out of bounds read in Pillow | < 8.2.0 | Undetermined |
| GHSA-p43w-g3c5-g5mq Out of bounds read in Pillow | 4.3.0 – < 8.1.1 | Undetermined |
| GHSA-p49h-hjvm-jg3h PCX P mode buffer overflow in Pillow | < 6.2.2 | Undetermined |
| GHSA-p4wg-p73j-c528 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) | 5.1.0 – < 13.0.0 | Undetermined |
| GHSA-p8hx-v2p6-rp84 Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) | < 13.0.0 | Undetermined |
| GHSA-pchr-8j38-3x4p Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read | < 13.0.0 | Undetermined |
| GHSA-pg7v-jwj7-p798 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service | 12.0.0 – < 12.3.0 | Undetermined |
| GHSA-phj9-mv4w-65pm Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()` | < 12.3.0 | Undetermined |
| GHSA-pw3c-h7wp-cvhx Improper Initialization in Pillow | < 9.0.0 | Undetermined |
| GHSA-pwv6-vv43-88gr Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) | 10.3.0 – < 12.2.0 | Undetermined |
| GHSA-q45j-58j2-45rg Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips | 5.3.0 – < 13.0.0 | Undetermined |
| GHSA-q4mp-jvh2-76fj Pillow subject to DoS via SAMPLESPERPIXEL tag | 9.2.0 – < 9.3.0 | Undetermined |
| GHSA-q5hq-fp76-qmrc Uncontrolled Resource Consumption in Pillow | < 8.2.0 | Undetermined |
| GHSA-r73j-pqj5-w3x7 Pillow has a PDF Parsing Trailer Infinite Loop (DoS) | 4.2.0 – < 12.2.0 | Undetermined |
| GHSA-r7rm-8j6h-r933 Buffer Copy without Checking Size of Input in Pillow | < 6.2.2 | Undetermined |
| GHSA-r854-96gq-rfg3 Pillow Temporary file name leakage | < 2.3.1 | Undetermined |
| GHSA-rfgq-q3w2-pmv2 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory | 9.1.0 – < 13.0.0 | Undetermined |
| GHSA-rwr3-c2q8-gm56 Pillow Integer overflow in Map.c | < 3.3.2 | Undetermined |
| GHSA-rwv7-3v45-hg29 Pillow Out-of-bounds Read vulnerability | 2.4.0 – < 8.2.0 | Undetermined |
| GHSA-v9pc-9mvp-x87g Pillow Buffer overflow in Jpeg2KEncode.c | 2.5.0 – < 3.1.2 | Undetermined |
| GHSA-v9pv-5gc8-w2m6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions | 11.0.0 – < 13.0.0 | Undetermined |
| GHSA-vcqg-3p29-xw73 Integer overflow in Pillow | < 6.2.2 | Undetermined |
| GHSA-vj42-xq3r-hr3r Out-of-bounds reads in Pillow | < 7.1.0 | Undetermined |
| GHSA-vjc4-5qp5-m44j Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service | 8.2.0 – < 12.3.0 | Undetermined |
| GHSA-vqcj-wrf2-7v73 Pillow Out-of-bounds Write | < 8.1.0 | Undetermined |
| GHSA-vx6w-vv9f-6gvg Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit | 2.3.0 – < 13.0.0 | Undetermined |
| GHSA-w4vg-rf63-f3j3 Arbitrary code using "crafted image file" approach affecting Pillow | < 3.3.2 | Undetermined |
| GHSA-w889-685w-c8fh Pillow: Argument Injection in Ghostscript call, potentially leading into RCE | 2.6.0 – < 13.0.0 | Undetermined |
| GHSA-whj4-6x5x-4v2j FITS GZIP decompression bomb in Pillow | 10.3.0 – < 12.2.0 | Undetermined |
| GHSA-wjx4-4jcj-g98j Pillow has an integer overflow when processing fonts | < 12.2.0 | Undetermined |
| GHSA-x895-2wrm-hvp7 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles | < 2.3.1 | Undetermined |
| GHSA-xg8h-j46f-w952 Pillow vulnerability can cause write buffer overflow on BCn encoding | 11.2.0 – < 11.3.0 | Undetermined |
| GHSA-xgh8-jp6q-p5x8 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes | < 13.0.0 | Undetermined |
| GHSA-xj96-63gp-2gmr Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` | < 12.3.0 | Undetermined |
| GHSA-xrcv-f9gm-v42c Out-of-bounds Read in Pillow | < 9.0.0 | Undetermined |
| GHSA-xvh5-g6gv-559v Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags | < 13.0.0 | Undetermined |
| OSV-2022-1074 Invalid-free in _dealloc | bb2016794f1f9bf9e4726727080e1beb789823fb – < f7363c1091c70356d92e56abfca6b65bef9e7b26 | Undetermined |
| OSV-2022-715 Segv on unknown address in jpeg_read_scanlines | c58d2817bc891c26e6b8098b8909c0eb2e7ce61b – < 9887544fafcd13cc8afcfa0c6d0f2e6facc1a8b8 | Undetermined |
| PYSEC-2014-10 PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a | < 205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d ; < 2.3.2 ; 2.5 – < 2.5.2 | Undetermined |
| PYSEC-2014-22 The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy functio | < 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7 ; < 2.3.1 | Undetermined |
| PYSEC-2014-23 The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary | < 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7 ; < 2.3.1 | Undetermined |
| PYSEC-2014-87 Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified v | < 2.5.0 | Undetermined |
| PYSEC-2015-15 The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image. | < 2.5.3 | Undetermined |
| PYSEC-2015-16 Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompresse | < 2.7.0 | Undetermined |
| PYSEC-2016-19 Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attacker | < 5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9 ; < ae453aa18b66af54e7ff716f4ccb33adca60afd4 ; < 3.1.1 | Undetermined |
| PYSEC-2016-5 Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted | < 6dcbf5bd96b717c58d7b642949da8d323099928e ; < 3.1.1 | Undetermined |
| PYSEC-2016-6 Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) v | < 893a40850c2d5da41537958e40569c029a6e127b ; < 3.1.1 | Undetermined |
| PYSEC-2016-7 Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact vi | < 4e0d9b0b9740d258ade40cce248c93777362ac1e ; < 3.1.1 | Undetermined |
| PYSEC-2016-8 Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overfl | < 3.3.2 | Undetermined |
| PYSEC-2016-9 Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extens | < 3.3.2 | Undetermined |
| PYSEC-2017-92 Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruptio | 2.5.0 – < 3.1.2 | Undetermined |
| PYSEC-2019-110 An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory | < 6.2.0 | Undetermined |
| PYSEC-2020-172 There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of ban | < 6.2.2 | Undetermined |
| PYSEC-2020-76 Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. | < 7.1.0 | Undetermined |
| PYSEC-2020-77 In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state | < 6a83e4324738bb0452fbe8074a995b1c73f08de7 ; < 7.1.0 | Undetermined |
| PYSEC-2020-78 In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. | < 46f4a349b88915787fea3fb91348bb1665831bbb ; < 7.1.0 | Undetermined |
| PYSEC-2020-79 In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file. | < 7.0.0 | Undetermined |
| PYSEC-2020-80 In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5 | < 7.1.0 | Undetermined |
| PYSEC-2020-81 libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. | < 4e2def2539ec13e53a82e06c4b3daf00454100c4 ; < 6.2.2 | Undetermined |
| PYSEC-2020-82 libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. | < a79b65c47c7dc6fe623aadf09aa6192fc54548f3 ; < 6.2.2 | Undetermined |
| PYSEC-2020-83 libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. | < 93b22b846e0269ee9594ff71a72bec02d2bea8fd ; < 6.2.2 | Undetermined |
| PYSEC-2020-84 libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. | < a09acd0decd8a87ccce939d5ff65dab59e7d365b ; < 6.2.2 | Undetermined |
| PYSEC-2021-137 An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. | < 8.2.0 | Undetermined |
| PYSEC-2021-138 An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i. | < 8.2.0 | Undetermined |
| PYSEC-2021-139 An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data | < 8.2.0 | Undetermined |
| PYSEC-2021-317 The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. | < 9e08eb8f78fdfd2f476e1b20b7cf38683754866b ; < 8.3.2 | Undetermined |
| PYSEC-2021-331 Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trig | < 8.3.0 | Undetermined |
| PYSEC-2021-35 An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation | < 8.1.1 | Undetermined |
| PYSEC-2021-36 An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. | < 8.1.1 | Undetermined |
| PYSEC-2021-37 An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. | < 8.1.1 | Undetermined |
| PYSEC-2021-38 An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic b | < 8.1.1 | Undetermined |
| PYSEC-2021-39 An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. | < 8.1.1 | Undetermined |
| PYSEC-2021-40 Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked fo | < 8.1.1 | Undetermined |
| PYSEC-2021-41 Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked fo | < 8.1.1 | Undetermined |
| PYSEC-2021-42 Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked fo | < 8.1.1 | Undetermined |
| PYSEC-2021-69 In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculati | < 8.1.0 | Undetermined |
| PYSEC-2021-70 In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF i | < 8.1.0 | Undetermined |
| PYSEC-2021-71 In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled. | 4.3.0 – < 8.1.0 | Undetermined |
| PYSEC-2021-92 An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an in | < 8.2.0 | Undetermined |
| PYSEC-2021-93 An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as | < 8.2.0 | Undetermined |
| PYSEC-2021-94 An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. Th | < 8.2.0 | Undetermined |
| PYSEC-2022-10 PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. | < 9.0.0 | Undetermined |
| PYSEC-2022-168 Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. | < 9.0.1 | Undetermined |
| PYSEC-2022-42979 Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). | < 11918eac0628ec8ac0812670d9838361ead2d6a4 ; < 9.2.0 | Undetermined |
| PYSEC-2022-42980 Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. | < 2444cddab2f83f28687c7c20871574acbb6dbcf3 ; 9.2.0 – < 9.3.0 | Undetermined |
| PYSEC-2022-43145 libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files. | 9.1.0 – < 9.1.1 | Undetermined |
| PYSEC-2022-8 path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. | < 9.0.0 | Undetermined |
| PYSEC-2022-9 path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. | < 9.0.0 | Undetermined |
| PYSEC-2023-175 Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the b | < 10.0.1 | Undetermined |
| PYSEC-2023-227 An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a s | < 1fe1bb49c452b0318cad12ea9d97c3bef188e9a7 ; < 10.0.0 | Undetermined |
| PYSEC-2025-61 Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with de | < 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09 ; < ef98b3510e3e4f14b547762764813d7e5ca3c5a4 ; 11.2.0 – < 11.3.0 | Undetermined |
| PYSEC-2026-165 Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the curr | < 12.2.0 | Undetermined |
| PYSEC-2026-1793 Pillow buffer overflow vulnerability | < 10.3.0 | Undetermined |
| PYSEC-2026-1794 libwebp: OOB write in BuildHuffmanTable | < 10.0.1 | Undetermined |
| PYSEC-2026-2249 Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulne | 10.3.0 – < 12.1.1 | Undetermined |
| PYSEC-2026-2250 Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them | 10.3.0 – < 12.2.0 | Undetermined |
| PYSEC-2026-2251 Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as Im | 11.2.1 – < 12.2.0 | Undetermined |
| PYSEC-2026-2252 Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially r | 10.3.0 – < 12.2.0 | Undetermined |
| PYSEC-2026-2253 Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them direc | < 12.3.0 | Undetermined |
| PYSEC-2026-2254 Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (x | < 12.3.0 | Undetermined |
| PYSEC-2026-2255 Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker- | < 12.3.0 | Undetermined |
| PYSEC-2026-2256 Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self | < 12.3.0 | Undetermined |
| PYSEC-2026-2257 Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f | < 12.3.0 | Undetermined |
| PYSEC-2026-2874 Pillow has a PDF Parsing Trailer Infinite Loop (DoS) | 4.2.0 – < 12.2.0 | Undetermined |
| PYSEC-2026-3451 Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates ne | < 12.3.0 | Undetermined |
| PYSEC-2026-3452 Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary | 12.0.0 – < 12.3.0 | Undetermined |
| PYSEC-2026-3453 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when | < 12.3.0 | Undetermined |
| PYSEC-2026-3454 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd f | < 12.3.0 | Undetermined |
| PYSEC-2026-3493 Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) | < 12.3.0 | Undetermined |
| PYSEC-2026-3494 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images | 5.2.0 – < 12.3.0 | Undetermined |
| PYSEC-2026-3495 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() | 5.1.0 – < 12.3.0 | Undetermined |
| PYSEC-2026-3496 Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service | 8.2.0 – < 12.3.0 | Undetermined |
| PYSEC-2026-4326 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() al | < 13.0.0 | Undetermined |
| PYSEC-2026-4327 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a | < 13.0.0 | Undetermined |
| PYSEC-2026-4328 Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memo | 11.3.0 – < 13.0.0 | Undetermined |
| PYSEC-2026-457 Arbitrary Code Execution in Pillow | < 10.2.0 | Undetermined |
Withdrawn advisories (4)
Withdrawn by their publisher: they affect no version and are not counted above.
- GHSA-56pw-mpj4-fxww Duplicate Advisory: Bundled libwebp in Pillow vulnerable · withdrawn
- GHSA-jgpv-4h4c-xhw3 Duplicate Advisory: Uncontrolled Resource Consumption in pillow · withdrawn
- PYSEC-2019-40 An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory · withdrawn
- PYSEC-2020-191 There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of ban · withdrawn
Sources
| Source | Licence |
|---|