Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer…

An issue was discovered in Pillow before 8.1.1

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values…

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0