Python-pillow - vulnerabilities (CVEs)

58 CVEs in 1 products, 38 in the last 30 days, newest from 2026-10-21.

Products

Pillow - 58 CVEs

Newest CVEs of Python-pillow

CVE-2026-114501 - CVSS 6.3 (medium), 2026-10-21: Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from…
CVE-2026-96639 - CVSS 9.8 (critical), 2026-10-21: Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a…
CVE-2026-96636 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size…
CVE-2026-96640 - CVSS 8.2 (high), 2026-10-21: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree…
CVE-2026-96637 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces…
CVE-2026-96778 - CVSS 8.8 (high), 2026-10-21: Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM…
CVE-2026-96643 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with…
CVE-2026-96644 - CVSS 8.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf…
CVE-2026-96641 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does…
CVE-2026-96642 - CVSS 7.1 (high), 2026-10-21: Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward…
CVE-2026-96638 - CVSS 6.5 (medium), 2026-10-21: Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and…
CVE-2026-112901 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open,…
CVE-2026-112900 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input.…
CVE-2026-112898 - CVSS 6.9 (medium), 2026-10-19: Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette.…
CVE-2026-112897 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of…
CVE-2026-112896 - CVSS 8.8 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size…
CVE-2026-112895 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser…
CVE-2026-112894 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with…
CVE-2026-112893 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If…
CVE-2026-112892 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder…
CVE-2026-112891 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header()…
CVE-2026-112406 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows…
CVE-2026-112405 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input…
CVE-2026-112404 - CVSS 8.8 (high), 2026-10-19: Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In…
CVE-2026-112403 - CVSS 9.8 (critical), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale.…
CVE-2026-112402 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure.…
CVE-2026-112397 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and…
CVE-2026-112392 - CVSS 8.2 (high), 2026-10-19: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand()…
CVE-2026-112401 - CVSS 7.5 (high), 2026-10-19: Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly…
CVE-2026-112400 - CVSS 8.7 (high), 2026-10-19: Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In…