python-pillow vulnerabilities

Products

• Pillow 62

Latest python-pillow CVEs

Newest publication first · page 1 of 3

1. CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size

   Published 2026-11-12

   High·CVSS 8.4

   Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffI...

2. CVE-2026-128066 Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

   Published 2026-11-12

   High·CVSS 8.7

   Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same fi...

3. CVE-2026-112902 Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

   Published 2026-11-05

   High·CVSS 8.3 EPSS 0.61%

   Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField() that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata through this encoder, crafte...

4. CVE-2026-112899 Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

   Published 2026-11-05

   Medium·CVSS 6.3 EPSS 0.55%

   Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image dimensions before invoking Ghostscript. Applications that process untrusted EPS or PostScript files using an application-selected scale greater than one can incu...

5. CVE-2026-114501 Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

   Published 2026-10-21

   Medium·CVSS 6.3 EPSS 0.37%

   Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLOW_ALIGNMENT makes aligned_linesize include row padding or an aligned offset before the first row. The r...

6. CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions

   Published 2026-10-21

   Critical·CVSS 9.8 EPSS 0.66%

   Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_p...

7. CVE-2026-96636 Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

   Published 2026-10-21

   Medium·CVSS 6.5 EPSS 0.35%

   Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can use a tiny first frame to pass Image.open()...

8. CVE-2026-96640 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

   Published 2026-10-21

   High·CVSS 8.2 EPSS 0.60%

   Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format="PDF", append=True) processes an attacker-controlle...

9. CVE-2026-96637 Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

   Published 2026-10-21

   High·CVSS 7.1 EPSS 0.37%

   Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open()...

10. CVE-2026-96778 Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

    Published 2026-10-21

    High·CVSS 7.7 EPSS 0.45%

    Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the ex...

11. CVE-2026-96643 Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

    Published 2026-10-21

    High·CVSS 7.1 EPSS 0.37%

    Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated head...

12. CVE-2026-96644 Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

    Published 2026-10-21

    High·CVSS 7.1 EPSS 0.38%

    Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies...

13. CVE-2026-96641 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

    Published 2026-10-21

    Medium·CVSS 6.5 EPSS 0.35%

    Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative advances against INT_MIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C...

14. CVE-2026-96642 Pillow: TarIO negative size field causes infinite CPU-spin loop

    Published 2026-10-21

    High·CVSS 7.1 EPSS 0.35%

    Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads th...

15. CVE-2026-96638 Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

    Published 2026-10-21

    Medium·CVSS 6.5 EPSS 0.35%

    Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest_length without a per-branch cap. A delta can add roughly 255 image row...

16. CVE-2026-112901 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

    Published 2026-10-19

    Medium·CVSS 6.9 EPSS 0.53%

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to th...

17. CVE-2026-112900 Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

    Published 2026-10-19

    Critical·CVSS 9.2 EPSS 1.3%

    Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name...

18. CVE-2026-112898 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

    Published 2026-10-19

    Medium·CVSS 6.9 EPSS 0.34%

    Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path...

19. CVE-2026-112897 Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

    Published 2026-10-19

    High·CVSS 8.7 EPSS 0.48%

    Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff...

20. CVE-2026-112896 Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

    Published 2026-10-19

    High·CVSS 8.8 EPSS 0.48%

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when th...

21. CVE-2026-112895 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

    Published 2026-10-19

    High·CVSS 8.7 EPSS 0.59%

    Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an...

22. CVE-2026-112894 Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

    Published 2026-10-19

    High·CVSS 8.7 EPSS 0.59%

    Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object....

23. CVE-2026-112893 Pillow: Invalid free in FreeType glyph rendering when a stroker is active

    Published 2026-10-19

    High·CVSS 8.2 EPSS 0.55%

    Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a ma...

24. CVE-2026-112892 Pillow: MSP RLE decoder expands a tiny file into unbounded memory

    Published 2026-10-19

    High·CVSS 8.7 EPSS 0.50%

    Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafte...

25. CVE-2026-112891 Pillow: Quadratic GIF comment copying during save

    Published 2026-10-19

    Medium·CVSS 6.9 EPSS 0.55%

    Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.