Log in Start free

python-pillow

Products

ProductCVEsExploitedLatest
Pillow60–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-112902 High 8.3 Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags 0.5%
  • CVE-2026-112899 Medium 6.3 Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit 0.5%
  • CVE-2026-114501 Medium 6.3 Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 0.4%
  • CVE-2026-96639 Critical 9.8 Pillow multi-frame loaders can reuse stale native image storage after mode transitions 0.7%
  • CVE-2026-96636 Medium 6.5 Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) 0.3%
  • CVE-2026-96640 High 8.2 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion 0.6%
  • CVE-2026-96637 High 7.1 Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS 0.4%
  • CVE-2026-96778 High 7.7 Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer 0.5%
  • CVE-2026-96643 High 7.1 Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time 0.4%
  • CVE-2026-96644 High 7.1 Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) 0.4%
  • CVE-2026-96641 Medium 6.5 Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise 0.3%
  • CVE-2026-96642 High 7.1 Pillow: TarIO negative size field causes infinite CPU-spin loop 0.3%
  • CVE-2026-96638 Medium 6.5 Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode 0.3%
  • CVE-2026-112901 Medium 6.9 Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes 0.5%
  • CVE-2026-112900 Critical 9.2 Pillow: Argument Injection in Ghostscript call, potentially leading into RCE 1.3%
  • CVE-2026-112898 Medium 6.9 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory 0.3%
  • CVE-2026-112897 High 8.7 Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips 0.5%
  • CVE-2026-112896 High 8.8 Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read 0.5%
  • CVE-2026-112895 High 8.7 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) 0.6%
  • CVE-2026-112894 High 8.7 Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) 0.6%
  • CVE-2026-112893 High 8.2 Pillow: Invalid free in FreeType glyph rendering when a stroker is active 0.5%
  • CVE-2026-112892 High 8.7 Pillow: MSP RLE decoder expands a tiny file into unbounded memory 0.5%
  • CVE-2026-112891 Medium 6.9 Pillow: Quadratic GIF comment copying during save 0.5%
  • CVE-2026-112406 High 8.7 Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle 0.6%
  • CVE-2026-112405 High 8.7 Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 0.6%
  • CVE-2026-112404 High 8.8 Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels 0.4%
  • CVE-2026-112403 Critical 9.2 Pillow: Heap buffer overflow in ImagingJpegDecode 0.9%
  • CVE-2026-112402 High 8.7 Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform 0.6%
  • CVE-2026-112397 High 8.7 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image 0.6%
  • CVE-2026-112392 High 8.2 Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images 0.6%