- Latest release
- 13.0.0 (Oct 16, 2026): no advisory affects it
- Newest unaffected release
- 13.0.0 (Oct 16, 2026), the latest release
- Advisories
- 113 · 6 critical, 38 high, 20 medium
- Weekly downloads
- 160.8M
- Dependents
- 94.7K
- Releases
- 105+ since 1.0.0 (Jul 31, 2010)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-114501Affects 11.2.1 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96639Affects 11.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96636Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96640Affects 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96637Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96778Affects 9.4.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96643Affects 11.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96644Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96641Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96642Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96638Affects 9.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112901Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
Show all 113 advisoriesShow fewer advisories
- CVE-2026-112900Affects 2.6.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112898Affects 9.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112897Affects 5.3.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112896Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112895Affects 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112894Affects 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112893Affects 10.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112892Affects 4.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112891Affects 9.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112406Affects 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112405Affects 12.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112404Affects 8.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112403Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112402Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112397Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112392Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112401Affects 5.4.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112400Affects 9.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112399Affects 8.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112398Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112396Affects 11.3.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112395Affects 8.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112394Affects 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112393Affects 2.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112391Affects 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112390Affects 7.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-54058Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59197Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59200Affects 5.1.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59198Affects 5.2.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59205Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59203Affects 12.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59199Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59204Affects 8.2.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55379Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55380Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-54060Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-54059Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55798Affects 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-42311Affects 10.3.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42310Affects 4.2.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42308Affects 1.0.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42309Affects 11.2.1 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-40192Affects 10.3.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-25990Affects 10.3.0 to 12.1.0 (12.1.1 is outside it)
- CVE-2025-48379Affects 11.2.1 (11.3.0 is outside it)
- CVE-2024-28219Affects 1.0.0 to 10.2.0 (10.3.0 is outside it)
- CVE-2023-50447Affects 1.0.0 to 10.1.0 (10.2.0 is outside it)
- CVE-2023-44271Affects 1.0.0 to 9.5.0 (10.0.0 is outside it)
- CVE-2023-4863Affects 1.0.0 to 10.0.0 (10.0.1 is outside it)
- CVE-2022-45199Affects 1.0.0 (1.1.0 is outside it); 1.2.0 (1.3.0 is outside it); 1.7.7 to 2.2.1 (2.2.2 is outside it); 2.3.0 (2.3.1 is outside it); 2.5.0 (2.5.1 is outside it); 2.7.0 to 2.8.1 (2.8.2 is outside it); 2.9.0 (3.0.0 is outside it); 3.1.0 (3.1.1 is outside it); 3.2.0 to 3.3.0 (3.3.1 is outside it); 3.4.0 (3.4.1 is outside it); 4.0.0 to 4.1.0 (4.1.1 is outside it); 4.2.0 (4.2.1 is outside it); 4.3.0 to 5.4.0 (5.4.1 is outside it); 6.0.0 to 6.2.0 (6.2.1 is outside it); 7.0.0 to 7.1.0 (7.1.1 is outside it); 7.2.0 to 8.0.0 (8.0.1 is outside it); 8.1.0 (8.1.1 is outside it); 8.2.0 to 8.3.0 (8.3.1 is outside it); 8.4.0 to 9.0.0 (9.0.1 is outside it); 9.1.0 (9.1.1 is outside it); 9.2.0 (9.3.0 is outside it)
- CVE-2022-45198Affects 1.0.0 to 9.1.1 (9.2.0 is outside it)
- CVE-2022-30595Affects 9.1.0 (9.1.1 is outside it)
- CVE-2022-24303Affects 1.0.0 to 9.0.0 (9.0.1 is outside it)
- CVE-2022-22817Affects 1.0.0 to 9.0.0 (9.0.1 is outside it)
- CVE-2022-22816Affects 1.0.0 to 8.4.0 (9.0.0 is outside it)
- CVE-2022-22815Affects 1.0.0 to 8.4.0 (9.0.0 is outside it)
- CVE-2021-23437Affects 1.0.0 to 8.3.1 (8.3.2 is outside it)
- CVE-2021-34552Affects 1.0.0 to 8.2.0 (8.3.0 is outside it)
- CVE-2021-28677Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28678Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25288Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25287Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28675Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28676Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- GHSA-JGPV-4H4C-XHW3Affects 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-25293Affects 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25292Affects 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25291Affects 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25290Affects 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25289Affects 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-27921Affects 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-27922Affects 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-27923Affects 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2020-35655Affects 4.3.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-35654Affects 1.0.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-35653Affects 1.0.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-10177Affects 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-11538Affects 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10994Affects 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10379Affects 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10378Affects 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2019-19911Affects 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5310Affects 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5311Affects 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5312Affects 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5313Affects 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2019-16865Affects 1.0.0 to 6.1.0 (6.2.0 is outside it)
- CVE-2016-3076Affects 2.5.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2016-9190Affects 1.0.0 to 3.3.1 (3.3.2 is outside it)
- CVE-2016-9189Affects 1.0.0 to 3.3.1 (3.3.2 is outside it)
- CVE-2016-4009Affects 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-2533Affects 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-0775Affects 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-0740Affects 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2014-3598Affects 1.0.0 to 2.5.2 (2.5.3 is outside it)
- CVE-2014-9601Affects 1.0.0 to 2.6.2 (2.7.0 is outside it)
- CVE-2014-3589Affects 1.0.0 to 2.3.1 (2.3.2 is outside it); 2.5.0 to 2.5.1 (2.5.2 is outside it)
- CVE-2014-3007Affects 1.0.0 to 2.4.0 (2.5.0 is outside it)
- CVE-2014-1933Affects 1.0.0 to 2.3.0 (2.3.1 is outside it)
- CVE-2014-1932Affects 1.0.0 to 2.3.0 (2.3.1 is outside it)
Advisories 113
- CVE-2026-114501Medium 6.3
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
Affected: from 11.2.1, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96639Critical 9.8
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Affected: from 11.0.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96636Medium 6.5
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96640High 8.2
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
Affected: from 5.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96637High 7.1
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96778High 7.7
Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
Affected: from 9.4.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96643High 7.1
Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time
Affected: from 11.0.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96644High 7.1
Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96641Medium 6.5
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96642High 7.1
Pillow: TarIO negative size field causes infinite CPU-spin loop
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-96638Medium 6.5
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
Affected: from 9.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112901Medium 6.9
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112900Critical 9.2
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
Affected: from 2.6.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112898Medium 6.9
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
Affected: from 9.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112897High 8.7
Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
Affected: from 5.3.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
Show all 113 advisoriesShow fewer advisories
- CVE-2026-112896High 8.8
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112895High 8.7
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Affected: from 5.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112894High 8.7
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
Affected: from 5.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112893High 8.2
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
Affected: from 10.0.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112892High 8.7
Pillow: MSP RLE decoder expands a tiny file into unbounded memory
Affected: from 4.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112891Medium 6.9
Pillow: Quadratic GIF comment copying during save
Affected: from 9.2.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112406High 8.7
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
Affected: from 5.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112405High 8.7
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
Affected: from 12.0.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112404High 8.8
Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
Affected: from 8.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112403Critical 9.2
Pillow: Heap buffer overflow in ImagingJpegDecode
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112402High 8.7
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112397High 8.7
Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112392High 8.2
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112401Medium 6.9
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
Affected: from 5.4.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112400High 8.7
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
Affected: from 9.2.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112399High 8.7
Pillow: APNG background disposal allocates full canvas before decompression bomb check
Affected: from 8.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112398Critical 9.2
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112396Medium 5.9
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Affected: from 11.3.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112395Medium 6.5
Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
Affected: from 8.2.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112394Medium 6.3
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
Affected: fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112393Critical 9.2
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
Affected: from 2.0.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112391Medium 6.3
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Affected: from 5.1.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-112390High 8.2
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
Affected: from 7.2.0, fixed in 13.0.0.
Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-54058High 8.3
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59197High 8.2
Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59200High 7.5
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Affected: from 5.1.0, fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59198Medium 6.5
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
Affected: from 5.2.0, fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59205High 7.5
Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59203Medium 5.3
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
Affected: from 12.0.0, fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59199High 7.5
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-59204High 8.7
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
Affected: from 8.2.0, fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-55379High 7.5
Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-55380High 7.5
Pillow GdImageFile decompression bomb protection bypass
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-54060High 7.5
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-54059High 7.5
Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF…
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-55798Medium 4.5
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
Affected: fixed in 12.3.0.
Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-42311High 8.6
Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
Affected: from 10.3.0, fixed in 12.2.0.
Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-42310Medium 5.1
Pillow: PDF Parsing Trailer Infinite Loop (DoS)
Affected: from 4.2.0, fixed in 12.2.0.
Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-42308Medium 5.1
Pillow: Integer overflow when processing fonts
Affected: fixed in 12.2.0.
Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-42309Medium 5.1
Pillow: Heap buffer overflow with nested list coordinates
Affected: from 11.2.1, fixed in 12.2.0.
Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-40192High 8.7
Pillow is vulnerable to a FITS GZIP decompression bomb
Affected: from 10.3.0, fixed in 12.2.0.
Fixed in 12.2.0 (released Apr 1, 2026, 14 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2026-25990High 8.6
Pillow has an out-of-bounds write when loading PSD images
Affected: from 10.3.0, fixed in 12.1.1.
Fixed in 12.1.1 (released Feb 11, 2026, the day of disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2025-48379High 7.1
Pillow Vulnerable to Write Buffer Overflow on BCn encoding
Affected: from 11.2.0, fixed in 11.3.0; from 11.2.0, fixed in 11.3.0.
Fixed in 11.3.0 (released Jul 1, 2025, the day of disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2024-28219Medium 6.7
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
Affected: fixed in 10.3.0.
Fixed in 10.3.0 (released Apr 1, 2024, 2 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2023-50447High 8.1
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than…
Affected: fixed in 10.2.0.
Fixed in 10.2.0 (released Jan 2, 2024, 17 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2023-44271Unrated
An issue was discovered in Pillow before 10.0.0.
Affected: fixed in 10.0.0; fixed in 10.0.0.
Fixed in 10.0.0 (released Jul 1, 2023, 125 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2023-4863High 8.8 · KEV
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo
Affected: fixed in 10.0.1.
Fixed in 10.0.1 (released Sep 15, 2023, 3 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-45199Unrated
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
Affected: from 9.2.0, fixed in 9.3.0; from 9.2.0, fixed in 9.3.0.
Fixed in 9.3.0 (released Oct 29, 2022, 16 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-45198Unrated
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Affected: fixed in 9.2.0; fixed in 9.2.0.
Fixed in 9.2.0 (released Jul 1, 2022, 136 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-30595Unrated
libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
Affected: from 9.1.0, fixed in 9.1.1.
Fixed in 9.1.1 (released May 17, 2022, 8 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-24303Unrated
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Affected: fixed in 9.0.1.
Fixed in 9.0.1 (released Feb 3, 2022, 53 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-22817Critical 9.8
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.
Affected: fixed in 9.0.0; fixed in 9.0.1.
Fixed in 9.0.1 (released Feb 3, 2022, 27 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-22816Unrated
path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
Affected: fixed in 9.0.0.
Fixed in 9.0.0 (released Jan 2, 2022, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2022-22815Unrated
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
Affected: fixed in 9.0.0.
Fixed in 9.0.0 (released Jan 2, 2022, 5 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-23437High 7.5
Regular Expression Denial of Service (ReDoS)
Affected: from 5.2.0, fixed in 8.3.2; fixed in 8.3.2.
Fixed in 8.3.2 (released Sep 2, 2021, 1 day before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-34552Unrated
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a…
Affected: fixed in 8.3.0.
Fixed in 8.3.0 (released Jul 1, 2021, 12 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-28677Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-28678Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: from 5.1.0, fixed in 8.2.0; fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25288Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: fixed in 8.2.0; from 2.4.0, fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25287Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: from 2.4.0, fixed in 8.2.0; fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-28675Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-28676Unrated
An issue was discovered in Pillow before 8.2.0.
Affected: fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
The latest release, 13.0.0, is not affected.
- GHSA-JGPV-4H4C-XHW3Medium
Uncontrolled Resource Consumption in pillow
Affected: fixed in 8.1.2.
Fixed in 8.1.2 (released Mar 6, 2021, 48 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25293Unrated
An issue was discovered in Pillow before 8.1.1.
Affected: from 4.3.0, fixed in 8.1.1; fixed in 8.1.1.
Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25292Unrated
An issue was discovered in Pillow before 8.1.1.
Affected: from 5.1.0, fixed in 8.1.1; fixed in 8.1.1.
Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25291Unrated
An issue was discovered in Pillow before 8.1.1.
Affected: fixed in 8.1.1; fixed in 8.2.0.
Fixed in 8.2.0 (released Apr 1, 2021, 13 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25290Unrated
An issue was discovered in Pillow before 8.1.1.
Affected: fixed in 8.1.1; fixed in 8.1.1.
Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-25289Unrated
An issue was discovered in Pillow before 8.1.1.
Affected: fixed in 8.1.1; fixed in 8.1.1.
Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-27921Unrated
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…
Affected: fixed in 8.1.1; fixed in 8.1.2.
Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-27922Unrated
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…
Affected: fixed in 8.1.1; fixed in 8.1.2.
Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2021-27923Unrated
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…
Affected: fixed in 8.1.1; fixed in 8.1.2.
Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-35655Unrated
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length…
Affected: from 4.3.0, fixed in 8.1.0; from 4.3.0, fixed in 8.1.0.
Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-35654Unrated
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation…
Affected: fixed in 8.1.0; fixed in 8.1.0.
Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-35653Unrated
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is…
Affected: fixed in 8.1.0; fixed in 8.1.0.
Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-10177Unrated
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
Affected: fixed in 7.1.0; fixed in 7.1.0.
Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-11538Unrated
In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different…
Affected: fixed in 7.1.0; fixed in 7.1.0.
Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-10994Unrated
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
Affected: fixed in 7.1.0; fixed in 7.0.0.
Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-10379Unrated
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
Affected: fixed in 7.1.0; fixed in 7.1.0.
Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-10378Unrated
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is…
Affected: fixed in 7.1.0; fixed in 7.1.0.
Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2019-19911Unrated
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit…
Affected: fixed in 6.2.2; fixed in 6.2.2.
Fixed in 6.2.2 (released Jan 2, 2020, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-5310Unrated
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
Affected: fixed in 6.2.2; fixed in 6.2.2.
Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-5311Unrated
libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
Affected: fixed in 6.2.2; fixed in 6.2.2.
Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-5312Unrated
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
Affected: fixed in 6.2.2; fixed in 6.2.2.
Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2020-5313Unrated
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
Affected: fixed in 6.2.2; fixed in 6.2.2.
Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2019-16865Unrated
An issue was discovered in Pillow before 6.2.0.
Affected: fixed in 6.2.0; fixed in 6.2.0.
Fixed in 6.2.0 (released Oct 1, 2019, 3 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-3076Unrated
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of…
Affected: from 2.5.0, fixed in 3.1.2.
Fixed in 3.1.2 (released Apr 1, 2016, 388 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-9190Unrated
Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an…
Affected: fixed in 3.3.2.
Fixed in 3.3.2 (released Oct 3, 2016, 32 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-9189Unrated
Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related…
Affected: fixed in 3.3.2.
Fixed in 3.3.2 (released Oct 3, 2016, 32 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-4009Unrated
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have…
Affected: fixed in 3.1.1.
Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-2533Unrated
Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier…
Affected: fixed in 3.1.1.
Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-0775Unrated
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a…
Affected: fixed in 3.1.1.
Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2016-0740Unrated
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to…
Affected: fixed in 3.1.1.
Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-3598Unrated
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
Affected: fixed in 2.5.3.
Fixed in 2.5.3 (released Aug 18, 2014, 256 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-9601Unrated
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size…
Affected: fixed in 2.7.0.
Fixed in 2.7.0 (released Jan 1, 2015, 15 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-3589Unrated
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a…
Affected: fixed in 2.3.2; from 2.5, fixed in 2.5.2; fixed in 2.3.2; from 2.5, fixed in 2.5.2.
Fixed in 2.3.2 (released Aug 13, 2014, 12 days before disclosure) and 2.5.2 (released Aug 13, 2014, 12 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-3007Unrated
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell…
Affected: fixed in 2.5.0.
Fixed in 2.5.0 (released Jul 1, 2014, 65 days after disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-1933Unrated
The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses…
Affected: fixed in 2.3.1.
Fixed in 2.3.1 (released Mar 15, 2014, 33 days before disclosure).
The latest release, 13.0.0, is not affected.
- CVE-2014-1932Unrated
The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py…
Affected: fixed in 2.3.1.
Fixed in 2.3.1 (released Mar 15, 2014, 33 days before disclosure).
The latest release, 13.0.0, is not affected.