Login Request a demo
PY
Vendor
python-pillow
1 product with CVEs on record
56
CVEs
0
On KEV
38
New 30D
Products
PI
Pillow
python-pillow
9.8
56 CVEs0 on KEV38 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114501
New
PI
Pillow
python-pillow
5.3
0%
Oct 21Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
CVE-2026-96639
New
PI
Pillow
python-pillow
9.8
1%
Oct 21Pillow multi-frame loaders can reuse stale native image storage after mode transitions
CVE-2026-96636
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
CVE-2026-96640
New
PI
Pillow
python-pillow
7.5
1%
Oct 21Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
CVE-2026-96637
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
CVE-2026-96778
New
PI
Pillow
python-pillow
8.8
1%
Oct 21Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
CVE-2026-96643
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
CVE-2026-96644
New
PI
Pillow
python-pillow
8.1
0%
Oct 21Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
CVE-2026-96641
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
CVE-2026-96642
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: TarIO negative size field causes infinite CPU-spin loop
CVE-2026-96638
New
PI
Pillow
python-pillow
6.5
0%
Oct 21Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
CVE-2026-112901
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
CVE-2026-112900
PI
Pillow
python-pillow
9.8
1%
Oct 19Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112898
PI
Pillow
python-pillow
5.3
0%
Oct 19Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
CVE-2026-112897
PI
Pillow
python-pillow
6.2
1%
Oct 19Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
CVE-2026-112896
PI
Pillow
python-pillow
7.1
0%
Oct 19Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
CVE-2026-112895
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
CVE-2026-112894
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112893
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Invalid free in FreeType glyph rendering when a stroker is active
CVE-2026-112892
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: MSP RLE decoder expands a tiny file into unbounded memory
CVE-2026-112891
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Quadratic GIF comment copying during save
CVE-2026-112406
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
CVE-2026-112405
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112404
PI
Pillow
python-pillow
8.2
0%
Oct 19Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
CVE-2026-112403
PI
Pillow
python-pillow
9.8
1%
Oct 19Pillow: Heap buffer overflow in ImagingJpegDecode
CVE-2026-112402
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-112397
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
CVE-2026-112392
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112401
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
CVE-2026-112400
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
CVE-2026-112399
PI
Pillow
python-pillow
7.5
0%
Oct 19Pillow: APNG background disposal allocates full canvas before decompression bomb check
CVE-2026-112398
PI
Pillow
python-pillow
9.8
1%
Oct 19Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
CVE-2026-112396
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
CVE-2026-112395
PI
Pillow
python-pillow
8.2
1%
Oct 19Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
CVE-2026-112394
PI
Pillow
python-pillow
8.2
1%
Oct 19Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112393
PI
Pillow
python-pillow
9.8
1%
Oct 19Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
CVE-2026-112391
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
CVE-2026-112390
PI
Pillow
python-pillow
7.5
1%
Oct 19Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-54058
PI
Pillow
python-pillow
9.1
1%
Jul 14Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
CVE-2026-59197
PI
Pillow
python-pillow
8.2
0%
Jul 14Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
CVE-2026-59200
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
CVE-2026-59198
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
CVE-2026-59205
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
CVE-2026-59203
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
CVE-2026-59199
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
CVE-2026-59204
PI
Pillow
python-pillow
7.5
0%
Jul 14Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
CVE-2026-55379
PI
Pillow
python-pillow
7.5
1%
Jul 6Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
CVE-2026-55380
PI
Pillow
python-pillow
7.5
1%
Jul 6Pillow GdImageFile decompression bomb protection bypass
CVE-2026-54060
PI
Pillow
python-pillow
7.5
0%
Jul 6Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
CVE-2026-54059
PI
Pillow
python-pillow
7.5
0%
Jul 6Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
CVE-2026-55798
PI
Pillow
python-pillow
4.5
0%
Jul 6Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
CVE-2026-42311
PI
Pillow
python-pillow
7.8
0%
May 9Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
CVE-2026-42310
PI
Pillow
python-pillow
5.5
0%
May 9Pillow: PDF Parsing Trailer Infinite Loop (DoS)
CVE-2026-42308
PI
Pillow
python-pillow
5.5
0%
May 9Pillow: Integer overflow when processing fonts
CVE-2026-42309
PI
Pillow
python-pillow
5.5
0%
May 9Pillow: Heap buffer overflow with nested list coordinates
CVE-2026-40192
PI
Pillow
python-pillow
7.5
1%
Apr 15Pillow is vulnerable to a FITS GZIP decompression bomb