python-pillow Pillow
58 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114501 | >= 11.2.1, < 13.0.0 | Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-96639 | >= 11.0.0, < 13.0.0 | Pillow multi-frame loaders can reuse stale native image storage after mode transitions | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-96636 | < 13.0.0 | Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-96640 | >= 5.1.0, < 13.0.0 | Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion | HIGH 8.2 | 0.5 % | ||
| CVE-2026-96637 | < 13.0.0 | Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS | HIGH 7.1 | 0.4 % | ||
| CVE-2026-96778 | >= 9.4.0, < 13.0.0 | Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer | HIGH 7.7 | 0.5 % | ||
| CVE-2026-96643 | >= 11.0.0, < 13.0.0 | Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time | HIGH 7.1 | 0.4 % | ||
| CVE-2026-96644 | < 13.0.0 | Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) | HIGH 7.1 | 0.4 % | ||
| CVE-2026-96641 | < 13.0.0 | Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-96642 | < 13.0.0 | Pillow: TarIO negative size field causes infinite CPU-spin loop | HIGH 7.1 | 0.4 % | ||
| CVE-2026-96638 | >= 9.1.0, < 13.0.0 | Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-112901 | < 13.0.0 | Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-112900 | >= 2.6.0, < 13.0.0 | Pillow: Argument Injection in Ghostscript call, potentially leading into RCE | CRITICAL 9.2 | 1.1 % | ||
| CVE-2026-112898 | >= 9.1.0, < 13.0.0 | Pillow: Image.quantize() with empty palette leaks uninitialized stack memory | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-112897 | >= 5.3.0, < 13.0.0 | Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips | HIGH 8.7 | 0.5 % | ||
| CVE-2026-112896 | < 13.0.0 | Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read | HIGH 8.8 | 0.5 % | ||
| CVE-2026-112895 | >= 5.1.0, < 13.0.0 | Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) | HIGH 8.7 | 0.4 % | ||
| CVE-2026-112894 | >= 5.1.0, < 13.0.0 | Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) | HIGH 8.7 | 0.5 % | ||
| CVE-2026-112893 | >= 10.0.0, < 13.0.0 | Pillow: Invalid free in FreeType glyph rendering when a stroker is active | HIGH 8.2 | 0.4 % | ||
| CVE-2026-112892 | >= 4.1.0, < 13.0.0 | Pillow: MSP RLE decoder expands a tiny file into unbounded memory | HIGH 8.7 | 0.4 % | ||
| CVE-2026-112891 | >= 9.2.0, < 13.0.0 | Pillow: Quadratic GIF comment copying during save | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-112406 | >= 5.1.0, < 13.0.0 | Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle | HIGH 8.7 | 0.4 % | ||
| CVE-2026-112405 | >= 12.0.0, < 13.0.0 | Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 | HIGH 8.7 | 0.4 % | ||
| CVE-2026-112404 | >= 8.1.0, < 13.0.0 | Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels | HIGH 8.8 | 0.4 % | ||
| CVE-2026-112403 | < 13.0.0 | Pillow: Heap buffer overflow in ImagingJpegDecode | CRITICAL 9.2 | 0.8 % | ||
| CVE-2026-112402 | < 13.0.0 | Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform | HIGH 8.7 | 0.5 % | ||
| CVE-2026-112397 | < 13.0.0 | Pillow: Out-of-bounds access in _imagingmorph on a zero-width image | HIGH 8.7 | 0.5 % | ||
| CVE-2026-112392 | < 13.0.0 | Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images | HIGH 8.2 | 0.6 % | ||
| CVE-2026-112401 | >= 5.4.0, < 13.0.0 | Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-112400 | >= 9.2.0, < 13.0.0 | Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS | HIGH 8.7 | 0.5 % | ||
| CVE-2026-112399 | >= 8.1.0, < 13.0.0 | Pillow: APNG background disposal allocates full canvas before decompression bomb check | HIGH 8.7 | 0.4 % | ||
| CVE-2026-112398 | < 13.0.0 | Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution | CRITICAL 9.2 | 0.6 % | ||
| CVE-2026-112396 | >= 11.3.0, < 13.0.0 | Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer | HIGH 7.5 | 0.7 % | ||
| CVE-2026-112395 | >= 8.2.0, < 13.0.0 | Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290) | HIGH 8.2 | 0.5 % | ||
| CVE-2026-112394 | < 13.0.0 | Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size | MEDIUM 6.3 | 0.6 % | ||
| CVE-2026-112393 | >= 2.0.0, < 13.0.0 | Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO | CRITICAL 9.2 | 1.0 % | ||
| CVE-2026-112391 | >= 5.1.0, < 13.0.0 | Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() | MEDIUM 6.3 | 0.6 % | ||
| CVE-2026-112390 | >= 7.2.0, < 13.0.0 | Pillow: Infinite loop in MIC n_frames when the embedded TIFF | HIGH 8.2 | 0.6 % | ||
| CVE-2026-54058 | < 12.3.0 | Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) | HIGH 8.3 | 0.5 % | ||
| CVE-2026-59197 | < 12.3.0 | Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` | HIGH 8.2 | 0.4 % | ||
| CVE-2026-59200 | >= 5.1.0, < 12.3.0 | Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() | HIGH 7.5 | 0.4 % | ||
| CVE-2026-59198 | >= 5.2.0, < 12.3.0 | Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images | HIGH 7.5 | 0.3 % | ||
| CVE-2026-59205 | < 12.3.0 | Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch | HIGH 7.5 | 0.4 % | ||
| CVE-2026-59203 | >= 12.0.0, < 12.3.0 | Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2026-59199 | < 12.3.0 | Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow | HIGH 7.5 | 0.4 % | ||
| CVE-2026-59204 | >= 8.2.0, < 12.3.0 | Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service | HIGH 8.7 | 0.4 % | ||
| CVE-2026-55379 | < 12.3.0 | Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading | HIGH 7.5 | 0.5 % | ||
| CVE-2026-55380 | < 12.3.0 | Pillow GdImageFile decompression bomb protection bypass | HIGH 7.5 | 0.5 % | ||
| CVE-2026-54060 | < 12.3.0 | Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` | HIGH 7.5 | 0.4 % | ||
| CVE-2026-54059 | < 12.3.0 | Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF f… | HIGH 7.5 | 0.4 % | ||
| CVE-2026-55798 | < 12.3.0 | Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path | MEDIUM 4.5 | 0.2 % | ||
| CVE-2026-42311 | >= 10.3.0, < 12.2.0 | Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow) | HIGH 8.6 | 0.1 % | ||
| CVE-2026-42310 | >= 4.2.0, < 12.2.0 | Pillow: PDF Parsing Trailer Infinite Loop (DoS) | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-42308 | < 12.2.0 | Pillow: Integer overflow when processing fonts | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-42309 | >= 11.2.1, < 12.2.0 | Pillow: Heap buffer overflow with nested list coordinates | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-40192 | >= 10.3.0, < 12.2.0 | Pillow is vulnerable to a FITS GZIP decompression bomb | HIGH 8.7 | 0.7 % | ||
| CVE-2026-25990 | >= 10.3.0, < 12.1.1 | Pillow has an out-of-bounds write when loading PSD images | HIGH 8.6 | 0.4 % | ||
| CVE-2025-48379 | >= 11.2.0, < 11.3.0 | Pillow Vulnerable to Write Buffer Overflow on BCn encoding | HIGH 7.1 | 0.3 % |