PI
Product
Pillow
111
CVEs
0
On KEV
9.8
Max CVSS
38
New 30D
Severity mix
Critical 16High 60Medium 29Low 0
Watch
Add Pillow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25291 | 7.5 | Mar 19 | An issue was discovered in Pillow before 8.1.1 Affected: before 8.1.1 |
| CVE-2021-25290 | 7.5 | Mar 19 | An issue was discovered in Pillow before 8.1.1 Affected: before 8.1.1 |
| CVE-2021-27923 | 7.5 | Mar 3 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container,… Affected: before 8.1.1 |
| CVE-2021-27922 | 7.5 | Mar 3 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS… Affected: before 8.1.1 |
| CVE-2021-27921 | 7.5 | Mar 3 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container,… Affected: before 8.1.1 |
| CVE-2019-19911 | 7.5 | Jan 5 | There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large Affected: before 6.2.2 |
| CVE-2019-16865 | 7.5 | Oct 4 | An issue was discovered in Pillow before 6.2.0 Affected: before 6.2.0 |
| CVE-2026-112896 | 7.1 | Oct 19 | Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read Affected: before 13.0.0 |
| CVE-2020-35653 | 7.1 | Jan 12 | In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations Affected: before 8.1.0 |
| CVE-2020-5313 | 7.1 | Jan 3 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow Affected: before 6.2.2 |