Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer…

An issue was discovered in Pillow before 8.1.1

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values…

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the…

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue…

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: Quadratic GIF comment copying during save

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch