python-pillow vulnerabilities

Products

• Pillow 60

Latest python-pillow CVEs

Newest publication first · page 2 of 3

1. CVE-2026-112404 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

   Published 2026-10-19

   High·CVSS 8.8 EPSS 0.44%

   Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample t...

2. CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

   Published 2026-10-19

   Critical·CVSS 9.2 EPSS 0.95%

   Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit...

3. CVE-2026-112402 Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

   Published 2026-10-19

   High·CVSS 8.7 EPSS 0.59%

   Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEA...

4. CVE-2026-112397 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

   Published 2026-10-19

   High·CVSS 8.7 EPSS 0.57%

   Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without reject...

5. CVE-2026-112392 Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

   Published 2026-10-19

   High·CVSS 8.2 EPSS 0.59%

   Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage;...

6. CVE-2026-112401 Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

   Published 2026-10-19

   Medium·CVSS 6.9 EPSS 0.65%

   Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open()....

7. CVE-2026-112400 Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

   Published 2026-10-19

   High·CVSS 8.7 EPSS 0.59%

   Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches t...

8. CVE-2026-112399 Pillow: APNG background disposal allocates full canvas before decompression bomb check

   Published 2026-10-19

   High·CVSS 8.7 EPSS 0.53%

   Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or fir...

9. CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

   Published 2026-10-19

   Critical·CVSS 9.2 EPSS 0.70%

   Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_...

10. CVE-2026-112396 Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

    Published 2026-10-19

    High·CVSS 7.5 EPSS 0.69%

    Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding...

11. CVE-2026-112395 Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

    Published 2026-10-19

    High·CVSS 8.2 EPSS 0.51%

    Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pill...

12. CVE-2026-112394 Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

    Published 2026-10-19

    Medium·CVSS 6.3 EPSS 0.56%

    Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image di...

13. CVE-2026-112393 Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

    Published 2026-10-19

    Critical·CVSS 9.2 EPSS 1.0%

    Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation fr...

14. CVE-2026-112391 Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

    Published 2026-10-19

    Medium·CVSS 6.3 EPSS 0.58%

    Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can prov...

15. CVE-2026-112390 Pillow: Infinite loop in MIC n_frames when the embedded TIFF

    Published 2026-10-19

    High·CVSS 8.2 EPSS 0.59%

    Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state,...

16. CVE-2026-54058 Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

    Published 2026-07-14

    High·CVSS 8.3 EPSS 0.52%

    Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.t...

17. CVE-2026-59197 Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

    Published 2026-07-14

    High·CVSS 8.2 EPSS 0.45%

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size vali...

18. CVE-2026-59200 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

    Published 2026-07-14

    High·CVSS 7.5 EPSS 0.39%

    Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaus...

19. CVE-2026-59198 Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

    Published 2026-07-14

    High·CVSS 7.5 EPSS 0.31%

    Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copied into the generated TGA file. This issue is fixed in versio...

20. CVE-2026-59205 Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

    Published 2026-07-14

    High·CVSS 7.5 EPSS 0.39%

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed...

21. CVE-2026-59203 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

    Published 2026-07-14

    High·CVSS 7.5 EPSS 0.40%

    Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeat...

22. CVE-2026-59199 Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

    Published 2026-07-14

    High·CVSS 7.5 EPSS 0.39%

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in v...

23. CVE-2026-59204 Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

    Published 2026-07-14

    High·CVSS 8.7 EPSS 0.39%

    Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient...

24. CVE-2026-55379 Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

    Published 2026-07-06

    High·CVSS 7.5 EPSS 0.52%

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented de...

25. CVE-2026-55380 Pillow GdImageFile decompression bomb protection bypass

    Published 2026-07-06

    High·CVSS 7.5 EPSS 0.52%

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap alloca...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.