pillow
PyPI112 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting pillowpage 3 of 3
- CVE-2026-59204HIGHCVSS 7.5EG 7.5fixed in 12.3.02026-07-14
vulnerable: 10.0.0 ... 9.5.0 (27 versions)
Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file…
- CVE-2026-59205HIGHCVSS 7.5EG 7.5fixed in 12.3.02026-07-14
vulnerable: 1.0 ... 9.5.0 (106 versions)
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's …
- CVE-2026-96636MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 1.0 ... 9.5.0 (107 versions)
Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can us…
- CVE-2026-96637MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 1.0 ... 9.5.0 (107 versions)
Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can us…
- CVE-2026-96638MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 10.0.0 ... 9.5.0 (21 versions)
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest_length without a per-branch c…
- CVE-2026-96639CRITICALCVSS 9.8EG 9.8fixed in 13.0.02026-10-21
vulnerable: 11.0.0 ... 12.3.0 (9 versions)
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to…
- CVE-2026-96640HIGHCVSS 7.5EG 7.5fixed in 13.0.02026-10-21
vulnerable: 10.0.0 ... 9.5.0 (49 versions)
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format="PDF", app…
- CVE-2026-96641MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 1.0 ... 9.5.0 (107 versions)
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative advances against INT_MIN. Repeating a signed 16-bit advance o…
- CVE-2026-96642MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 1.0 ... 9.5.0 (107 versions)
Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does …
- CVE-2026-96643MEDIUMCVSS 6.5EG 6.5fixed in 13.0.02026-10-21
vulnerable: 11.0.0 ... 12.3.0 (9 versions)
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf c…
- CVE-2026-96644HIGHCVSS 8.1EG 8.1fixed in 13.0.02026-10-21
vulnerable: 1.0 ... 9.5.0 (107 versions)
Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncate…
- CVE-2026-96778HIGHCVSS 8.8EG 8.8fixed in 13.0.02026-10-21
vulnerable: 10.0.0 ... 9.5.0 (17 versions)
Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjp…
Check whether pillow is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pillow CVEs against the assets you own.
Book a Demo →