Start for Free
pypi

pillow

View on pypi registry
100 Total advisories
100 Vulnerabilities
0 Malware

Dependency scanning

Check whether pillow is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 6.5
PyPI

CVE-2026-96641

CVE-2026-96641
MEDIUM 6.5
PyPI

CVE-2026-96641

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
UNKNOWN
PyPI

CVE-2026-96778

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
MEDIUM 5.3
PyPI

CVE-2026-114501

CVE-2026-114501
UNKNOWN
PyPI

CVE-2026-114501

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
MEDIUM 6.5
PyPI

CVE-2026-96637

CVE-2026-96637
UNKNOWN
PyPI

CVE-2026-96637

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
MEDIUM 6.5
PyPI

CVE-2026-96636

CVE-2026-96636
MEDIUM 6.5
PyPI

CVE-2026-96636

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
MEDIUM 6.5
PyPI

CVE-2026-96642

CVE-2026-96642
UNKNOWN
PyPI

CVE-2026-96642

Pillow: TarIO negative size field causes infinite CPU-spin loop
MEDIUM 6.5
PyPI

CVE-2026-96643

CVE-2026-96643
UNKNOWN
PyPI

CVE-2026-96643

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
UNKNOWN
PyPI

CVE-2026-96640

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
CRITICAL 9.8
PyPI

CVE-2026-96639

CVE-2026-96639
CRITICAL 9.8
PyPI

CVE-2026-96639

Pillow multi-frame loaders can reuse stale native image storage after mode transitions
MEDIUM 6.5
PyPI

CVE-2026-96638

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
HIGH 8.1
PyPI

CVE-2026-96644

CVE-2026-96644
UNKNOWN
PyPI

CVE-2026-96644

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
HIGH 7.5
PyPI

CVE-2026-112901

CVE-2026-112901
UNKNOWN
PyPI

CVE-2026-112901

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
HIGH 7.5
PyPI

CVE-2026-112397

CVE-2026-112397
UNKNOWN
PyPI

CVE-2026-112397

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
CRITICAL 9.8
PyPI

CVE-2026-112403

CVE-2026-112403
UNKNOWN
PyPI

CVE-2026-112403

Pillow: Heap buffer overflow in ImagingJpegDecode
CRITICAL 9.8
PyPI

CVE-2026-112398

CVE-2026-112398
UNKNOWN
PyPI

CVE-2026-112398

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
HIGH 7.1
PyPI

CVE-2026-112896

CVE-2026-112896
UNKNOWN
PyPI

CVE-2026-112896

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
HIGH 7.5
PyPI

CVE-2026-112405

CVE-2026-112405
UNKNOWN
PyPI

CVE-2026-112405

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
HIGH 7.5
PyPI

CVE-2026-112402

CVE-2026-112402
UNKNOWN
PyPI

CVE-2026-112402

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
HIGH 7.5
PyPI

GHSA-jgpv-4h4c-xhw3

Duplicate Advisory: Uncontrolled Resource Consumption in pillow
HIGH 7.5
PyPI

CVE-2026-112396

CVE-2026-112396
MEDIUM 5.9
PyPI

CVE-2026-112396

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
HIGH 7.5
PyPI

CVE-2026-112392

CVE-2026-112392
UNKNOWN
PyPI

CVE-2026-112392

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
HIGH 8.2
PyPI

CVE-2026-112394

CVE-2026-112394
UNKNOWN
PyPI

CVE-2026-112394

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
UNKNOWN
PyPI

CVE-2026-112391

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
UNKNOWN
PyPI

CVE-2026-112399

Pillow: APNG background disposal allocates full canvas before decompression bomb check
UNKNOWN
PyPI

CVE-2026-112401

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
UNKNOWN
PyPI

CVE-2026-112406

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
UNKNOWN
PyPI

CVE-2026-112894

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
UNKNOWN
PyPI

CVE-2026-112897

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
UNKNOWN
PyPI

CVE-2026-112393

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
UNKNOWN
PyPI

CVE-2026-112891

Pillow: Quadratic GIF comment copying during save
UNKNOWN
PyPI

CVE-2026-112390

Pillow: Infinite loop in MIC n_frames when the embedded TIFF
MEDIUM 6.5
PyPI

CVE-2026-112395

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
UNKNOWN
PyPI

CVE-2026-112404

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
UNKNOWN
PyPI

CVE-2026-112892

Pillow: MSP RLE decoder expands a tiny file into unbounded memory
UNKNOWN
PyPI

CVE-2026-112898

Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
UNKNOWN
PyPI

CVE-2026-112400

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
UNKNOWN
PyPI

CVE-2026-112893

Pillow: Invalid free in FreeType glyph rendering when a stroker is active
UNKNOWN
PyPI

CVE-2026-112895

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
UNKNOWN
PyPI

CVE-2026-112900

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
HIGH 8.1
PyPI

GHSA-78g4-xqwv-q3g8

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
UNKNOWN
PyPI

CVE-2026-112902

Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
UNKNOWN
PyPI

CVE-2026-112899

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
MEDIUM 5.5
PyPI

CVE-2026-42309

Pillow has a heap buffer overflow with nested list coordinates
HIGH 7.5
PyPI

CVE-2026-55380

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
HIGH 7.5
PyPI

CVE-2026-59205

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
HIGH 7.5
PyPI

CVE-2026-54059

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
HIGH 7.5
PyPI

CVE-2026-59199

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
UNKNOWN
PyPI

CVE-2026-54058

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
HIGH 7.5
PyPI

CVE-2026-54060

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
MEDIUM 4.5
PyPI

CVE-2026-55798

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
HIGH 7.5
PyPI

CVE-2026-40192

FITS GZIP decompression bomb in Pillow
UNKNOWN
PyPI

CVE-2026-25990

Pillow affected by out-of-bounds write when loading PSD images
MEDIUM 5.5
PyPI

CVE-2026-42310

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
HIGH 8.2
PyPI

CVE-2026-59197

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
UNKNOWN
PyPI

CVE-2026-59204

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
MEDIUM 5.3
PyPI

CVE-2026-59203

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
MEDIUM 6.5
PyPI

CVE-2026-59198

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
HIGH 7.5
PyPI

CVE-2026-55379

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
MEDIUM 5.5
PyPI

CVE-2026-42308

Pillow has an integer overflow when processing fonts
UNKNOWN
PyPI

CVE-2026-42311

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
HIGH 7.1
PyPI

CVE-2025-48379

Pillow vulnerability can cause write buffer overflow on BCn encoding
HIGH 7.5
PyPI

CVE-2026-59200

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
MEDIUM 6.7
PyPI

CVE-2024-28219

Pillow buffer overflow vulnerability
HIGH 8.1
PyPI

CVE-2023-50447

Arbitrary Code Execution in Pillow
HIGH 8.8
crates.io KEV

CVE-2023-4863

libwebp: OOB write in BuildHuffmanTable
UNKNOWN
PyPI

CVE-2026-54058

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
MEDIUM 6.5
PyPI

CVE-2026-59198

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
HIGH 7.5
PyPI

CVE-2026-59200

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
UNKNOWN
PyPI

CVE-2026-59204

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
HIGH 8.2
PyPI

CVE-2026-59197

CVE-2026-59197
HIGH 7.5
PyPI

CVE-2026-59199

CVE-2026-59199
HIGH 7.5
PyPI

CVE-2026-59203

CVE-2026-59203
HIGH 7.5
PyPI

CVE-2026-59205

CVE-2026-59205
MEDIUM 5.5
PyPI

CVE-2026-42310

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
HIGH 7.5
PyPI

CVE-2026-54060

CVE-2026-54060
HIGH 7.8
PyPI

CVE-2026-42311

CVE-2026-42311
HIGH 7.5
PyPI

CVE-2026-25990

CVE-2026-25990
HIGH 7.5
PyPI

CVE-2026-54059

CVE-2026-54059
MEDIUM 4.5
PyPI

CVE-2026-55798

CVE-2026-55798
MEDIUM 5.5
PyPI

CVE-2026-42309

CVE-2026-42309
HIGH 7.5
PyPI

CVE-2026-55379

CVE-2026-55379
HIGH 7.5
PyPI

CVE-2026-40192

CVE-2026-40192

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes