Pillow (Python) - vulnerabilities (CVEs)

111 CVEs, 38 in the last 30 days, 100 known versions, newest CVE from 2026-10-21. Vendor: Python.

CVEs of Pillow

CVE-2026-114501 - CVSS 6.3 (medium), 2026-10-21: Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from…
CVE-2026-96639 - CVSS 9.8 (critical), 2026-10-21: Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a…
CVE-2026-96636 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size…
CVE-2026-96640 - CVSS 8.2 (high), 2026-10-21: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree…
CVE-2026-96637 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces…
CVE-2026-96778 - CVSS 8.8 (high), 2026-10-21: Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM…
CVE-2026-96643 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with…
CVE-2026-96644 - CVSS 8.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf…
CVE-2026-96641 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does…
CVE-2026-96642 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward…
CVE-2026-96638 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and…
CVE-2026-112901 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open,…
CVE-2026-112900 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input.…
CVE-2026-112898 - CVSS 6.9 (medium), 2026-10-19: Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette.…
CVE-2026-112897 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of…
CVE-2026-112896 - CVSS 8.8 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size…
CVE-2026-112895 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser…
CVE-2026-112894 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with…
CVE-2026-112893 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If…
CVE-2026-112892 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder…
CVE-2026-112891 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header()…
CVE-2026-112406 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows…
CVE-2026-112405 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input…
CVE-2026-112404 - CVSS 8.8 (high), 2026-10-19: Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In…
CVE-2026-112403 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale.…
CVE-2026-112402 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure.…
CVE-2026-112397 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and…
CVE-2026-112392 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand()…
CVE-2026-112401 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly…
CVE-2026-112400 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In…
CVE-2026-112399 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the…
CVE-2026-112398 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer.…
CVE-2026-112396 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an…
CVE-2026-112395 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In…
CVE-2026-112394 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates…
CVE-2026-112393 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving…
CVE-2026-112391 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The…
CVE-2026-112390 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile…
CVE-2026-54058 - CVSS 9.1 (critical), 2026-07-14: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path,…
CVE-2026-59197 - CVSS 8.2 (high), 2026-07-14: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd…
CVE-2026-59200 - CVSS 7.5 (high), 2026-07-14: Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the…
CVE-2026-59198 - CVSS 7.5 (high), 2026-07-14: Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE…
CVE-2026-59205 - CVSS 7.5 (high), 2026-07-14: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption…
CVE-2026-59203 - CVSS 7.5 (high), 2026-07-14: Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the…
CVE-2026-59199 - CVSS 7.5 (high), 2026-07-14: Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates…
CVE-2026-59204 - CVSS 8.7 (high), 2026-07-14: Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000…
CVE-2026-55379 - CVSS 7.5 (high), 2026-07-06: Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed…
CVE-2026-55380 - CVSS 7.5 (high), 2026-07-06: Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in…
CVE-2026-54060 - CVSS 7.5 (high), 2026-07-06: Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1",…
CVE-2026-54059 - CVSS 7.5 (high), 2026-07-06: Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them…
CVE-2026-55798 - CVSS 4.5 (medium), 2026-07-06: Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an…
CVE-2026-42311 - CVSS 8.6 (high), 2026-05-09: Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially…
CVE-2026-42310 - CVSS 5.5 (medium), 2026-05-09: Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang…
CVE-2026-42309 - CVSS 5.5 (medium), 2026-05-09: Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as…
CVE-2026-42308 - CVSS 5.5 (medium), 2026-05-09: Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the…
CVE-2026-40192 - CVSS 8.7 (high), 2026-04-15: Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making…
CVE-2026-25990 - CVSS 8.6 (high), 2026-02-11: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This…
CVE-2025-48379 - CVSS 7.1 (high), 2025-07-01: Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with…
CVE-2024-28219 - CVSS 6.7 (medium), 2024-04-03: In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
CVE-2023-50447 - CVSS 8.1 (high), 2024-01-19: Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which…
CVE-2023-44271 - CVSS 7.5 (high), 2023-11-03: An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a…
CVE-2022-45199 - CVSS 7.5 (high), 2022-11-14: Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
CVE-2022-45198 - CVSS 7.5 (high), 2022-11-14: Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
CVE-2022-30595 - CVSS 9.8 (critical), 2022-05-25: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
CVE-2022-24303 - CVSS 9.1 (critical), 2022-03-28: Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
CVE-2022-22817 - CVSS 9.8 (critical), 2022-01-10: PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could…
CVE-2022-22816 - CVSS 6.5 (medium), 2022-01-10: path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
CVE-2022-22815 - CVSS 6.5 (medium), 2022-01-10: path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
CVE-2021-23437 - CVSS 7.5 (high), 2021-09-03: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
CVE-2021-34552 - CVSS 9.8 (critical), 2021-07-13: Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to…
CVE-2021-25288 - CVSS 9.1 (critical), 2021-06-02: An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.
CVE-2021-28678 - CVSS 5.5 (medium), 2021-06-02: An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data.…
CVE-2021-25287 - CVSS 9.1 (critical), 2021-06-02: An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.
CVE-2021-28677 - CVSS 7.5 (high), 2021-06-02: An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n…
CVE-2021-28676 - CVSS 7.5 (high), 2021-06-02: An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an…
CVE-2021-28675 - CVSS 5.5 (medium), 2021-06-02: An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the…
CVE-2021-25290 - CVSS 7.5 (high), 2021-03-19: An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.
CVE-2021-25293 - CVSS 7.5 (high), 2021-03-19: An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
CVE-2021-25289 - CVSS 9.8 (critical), 2021-03-19: An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain…
CVE-2021-25292 - CVSS 6.5 (medium), 2021-03-19: An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic…
CVE-2021-25291 - CVSS 7.5 (high), 2021-03-19: An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.
CVE-2021-27922 - CVSS 7.5 (high), 2021-03-03: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked…
CVE-2021-27921 - CVSS 7.5 (high), 2021-03-03: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked…
CVE-2021-27923 - CVSS 7.5 (high), 2021-03-03: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked…
CVE-2020-35653 - CVSS 7.1 (high), 2021-01-12: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer…
CVE-2020-35655 - CVSS 5.4 (medium), 2021-01-12: In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
CVE-2020-35654 - CVSS 8.8 (high), 2021-01-12: In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF…
CVE-2020-10379 - CVSS 7.8 (high), 2020-06-25: In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
CVE-2020-10378 - CVSS 5.5 (medium), 2020-06-25: In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond…
CVE-2020-11538 - CVSS 8.1 (high), 2020-06-25: In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than…
CVE-2020-10177 - CVSS 5.5 (medium), 2020-06-25: Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
CVE-2020-10994 - CVSS 5.5 (medium), 2020-06-25: In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
CVE-2019-19911 - CVSS 7.5 (high), 2020-01-05: There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of…
CVE-2020-5311 - CVSS 9.8 (critical), 2020-01-03: libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
CVE-2020-5310 - CVSS 8.8 (high), 2020-01-03: libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
CVE-2020-5313 - CVSS 7.1 (high), 2020-01-03: libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
CVE-2020-5312 - CVSS 9.8 (critical), 2020-01-03: libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
CVE-2019-16865 - CVSS 7.5 (high), 2019-10-04: An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of…
CVE-2016-3076 - CVSS 5.5 (medium), 2017-04-24: Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory…
CVE-2016-9190 - CVSS 7.8 (high), 2016-11-04: Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign…