Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the…

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue…

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: Quadratic GIF comment copying during save

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow GdImageFile decompression bomb protection bypass

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Pillow is vulnerable to a FITS GZIP decompression bomb

Pillow is a Python imaging library

An issue was discovered in Pillow before 10.0.0

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification)

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.1.1