pillow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-78G4-XQWV-Q3G8Highpillow: Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from…CVE-2026-96778HighPillow: Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer CVE-2026-96644HighPillow: Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)CVE-2026-96643HighPillow: Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time CVE-2026-96642HighPillow: Pillow: TarIO negative size field causes infinite CPU-spin loop CVE-2026-96641Mediumpillow: Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise CVE-2026-96640HighPillow: Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion CVE-2026-96639CriticalPillow: Pillow multi-frame loaders can reuse stale native image storage after mode transitions CVE-2026-96638Mediumpillow: Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode CVE-2026-96637Highpillow: Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS CVE-2026-96636MediumPillow: Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)CVE-2026-112902HighPillow: Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags CVE-2026-112393CriticalPillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO CVE-2026-112396Mediumpillow: Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer CVE-2026-112406HighPillow: Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle CVE-2026-112399HighPillow: Pillow: APNG background disposal allocates full canvas before decompression bomb check CVE-2026-112892Highpillow: Pillow: MSP RLE decoder expands a tiny file into unbounded memory CVE-2026-112894HighPillow: Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)CVE-2026-112391MediumPillow: Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()CVE-2026-112901MediumPillow: Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes CVE-2026-112898MediumPillow: Pillow: Image.quantize() with empty palette leaks uninitialized stack memory CVE-2026-112401MediumPillow: Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()CVE-2026-112390HighPillow: Pillow: Infinite loop in MIC n_frames when the embedded TIFF CVE-2026-112891Mediumpillow: Pillow: Quadratic GIF comment copying during save CVE-2026-112392HighPillow: Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo