# pillow (PyPI) vulnerabilities

113 known vulnerabilities (6 critical, 38 high, 20 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 13.0.0 (Oct 16, 2026): no advisory affects it
- Newest unaffected release: 13.0.0 (Oct 16, 2026), the latest release
- Weekly downloads: 160.8M
- Dependents: 94.7K
- Releases: 105+ since 1.0.0 (Jul 31, 2010)
- Registry: https://pypi.org/project/pillow/
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-114501: 11.2.1 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96639: 11.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96636: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96640: 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96637: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96778: 9.4.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96643: 11.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96644: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96641: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96642: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-96638: 9.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112901: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112900: 2.6.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112898: 9.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112897: 5.3.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112896: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112895: 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112894: 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112893: 10.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112892: 4.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112891: 9.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112406: 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112405: 12.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112404: 8.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112403: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112402: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112397: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112392: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112401: 5.4.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112400: 9.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112399: 8.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112398: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112396: 11.3.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112395: 8.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112394: 1.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112393: 2.0.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112391: 5.1.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-112390: 7.2.0 to 12.3.0 (13.0.0 is outside it)
- CVE-2026-54058: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59197: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59200: 5.1.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59198: 5.2.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59205: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59203: 12.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59199: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-59204: 8.2.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55379: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55380: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-54060: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-54059: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-55798: 1.0.0 to 12.2.0 (12.3.0 is outside it)
- CVE-2026-42311: 10.3.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42310: 4.2.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42308: 1.0.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-42309: 11.2.1 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-40192: 10.3.0 to 12.1.1 (12.2.0 is outside it)
- CVE-2026-25990: 10.3.0 to 12.1.0 (12.1.1 is outside it)
- CVE-2025-48379: 11.2.1 (11.3.0 is outside it)
- CVE-2024-28219: 1.0.0 to 10.2.0 (10.3.0 is outside it)
- CVE-2023-50447: 1.0.0 to 10.1.0 (10.2.0 is outside it)
- CVE-2023-44271: 1.0.0 to 9.5.0 (10.0.0 is outside it)
- CVE-2023-4863: 1.0.0 to 10.0.0 (10.0.1 is outside it)
- CVE-2022-45199: 1.0.0 (1.1.0 is outside it); 1.2.0 (1.3.0 is outside it); 1.7.7 to 2.2.1 (2.2.2 is outside it); 2.3.0 (2.3.1 is outside it); 2.5.0 (2.5.1 is outside it); 2.7.0 to 2.8.1 (2.8.2 is outside it); 2.9.0 (3.0.0 is outside it); 3.1.0 (3.1.1 is outside it); 3.2.0 to 3.3.0 (3.3.1 is outside it); 3.4.0 (3.4.1 is outside it); 4.0.0 to 4.1.0 (4.1.1 is outside it); 4.2.0 (4.2.1 is outside it); 4.3.0 to 5.4.0 (5.4.1 is outside it); 6.0.0 to 6.2.0 (6.2.1 is outside it); 7.0.0 to 7.1.0 (7.1.1 is outside it); 7.2.0 to 8.0.0 (8.0.1 is outside it); 8.1.0 (8.1.1 is outside it); 8.2.0 to 8.3.0 (8.3.1 is outside it); 8.4.0 to 9.0.0 (9.0.1 is outside it); 9.1.0 (9.1.1 is outside it); 9.2.0 (9.3.0 is outside it)
- CVE-2022-45198: 1.0.0 to 9.1.1 (9.2.0 is outside it)
- CVE-2022-30595: 9.1.0 (9.1.1 is outside it)
- CVE-2022-24303: 1.0.0 to 9.0.0 (9.0.1 is outside it)
- CVE-2022-22817: 1.0.0 to 9.0.0 (9.0.1 is outside it)
- CVE-2022-22816: 1.0.0 to 8.4.0 (9.0.0 is outside it)
- CVE-2022-22815: 1.0.0 to 8.4.0 (9.0.0 is outside it)
- CVE-2021-23437: 1.0.0 to 8.3.1 (8.3.2 is outside it)
- CVE-2021-34552: 1.0.0 to 8.2.0 (8.3.0 is outside it)
- CVE-2021-28677: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28678: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25288: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25287: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28675: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-28676: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- GHSA-JGPV-4H4C-XHW3: 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-25293: 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25292: 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25291: 1.0.0 to 8.1.2 (8.2.0 is outside it)
- CVE-2021-25290: 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-25289: 1.0.0 to 8.1.0 (8.1.1 is outside it)
- CVE-2021-27921: 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-27922: 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2021-27923: 1.0.0 to 8.1.1 (8.1.2 is outside it)
- CVE-2020-35655: 4.3.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-35654: 1.0.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-35653: 1.0.0 to 8.0.1 (8.1.0 is outside it)
- CVE-2020-10177: 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-11538: 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10994: 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10379: 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2020-10378: 1.0.0 to 7.0.0 (7.1.0 is outside it)
- CVE-2019-19911: 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5310: 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5311: 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5312: 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2020-5313: 1.0.0 to 6.2.1 (6.2.2 is outside it)
- CVE-2019-16865: 1.0.0 to 6.1.0 (6.2.0 is outside it)
- CVE-2016-3076: 2.5.0 to 3.1.1 (3.1.2 is outside it)
- CVE-2016-9190: 1.0.0 to 3.3.1 (3.3.2 is outside it)
- CVE-2016-9189: 1.0.0 to 3.3.1 (3.3.2 is outside it)
- CVE-2016-4009: 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-2533: 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-0775: 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2016-0740: 1.0.0 to 3.1.0 (3.1.1 is outside it)
- CVE-2014-3598: 1.0.0 to 2.5.2 (2.5.3 is outside it)
- CVE-2014-9601: 1.0.0 to 2.6.2 (2.7.0 is outside it)
- CVE-2014-3589: 1.0.0 to 2.3.1 (2.3.2 is outside it); 2.5.0 to 2.5.1 (2.5.2 is outside it)
- CVE-2014-3007: 1.0.0 to 2.4.0 (2.5.0 is outside it)
- CVE-2014-1933: 1.0.0 to 2.3.0 (2.3.1 is outside it)
- CVE-2014-1932: 1.0.0 to 2.3.0 (2.3.1 is outside it)

Older releases aren't stored, so the earliest spans may start sooner.

## Advisories (113)

### [CVE-2026-114501](https://cve.now/CVE-2026-114501): Pillow: Arrow export leaks stale heap memory when PILLOW\_ALIGNMENT \> 1

- Severity: Medium 6.3
- Published: Oct 21, 2026
- Affected: from 11.2.1, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96639](https://cve.now/CVE-2026-96639): Pillow multi-frame loaders can reuse stale native image storage after mode transitions

- Severity: Critical 9.8
- Published: Oct 21, 2026
- Affected: from 11.0.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96636](https://cve.now/CVE-2026-96636): Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

- Severity: Medium 6.5
- Published: Oct 21, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96640](https://cve.now/CVE-2026-96640): Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

- Severity: High 8.2
- Published: Oct 21, 2026
- Affected: from 5.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96637](https://cve.now/CVE-2026-96637): Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

- Severity: High 7.1
- Published: Oct 21, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96778](https://cve.now/CVE-2026-96778): Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

- Severity: High 7.7
- Published: Oct 21, 2026
- Affected: from 9.4.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96643](https://cve.now/CVE-2026-96643): Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

- Severity: High 7.1
- Published: Oct 21, 2026
- Affected: from 11.0.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96644](https://cve.now/CVE-2026-96644): Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

- Severity: High 7.1
- Published: Oct 21, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96641](https://cve.now/CVE-2026-96641): Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

- Severity: Medium 6.5
- Published: Oct 21, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96642](https://cve.now/CVE-2026-96642): Pillow: TarIO negative size field causes infinite CPU-spin loop

- Severity: High 7.1
- Published: Oct 21, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-96638](https://cve.now/CVE-2026-96638): Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

- Severity: Medium 6.5
- Published: Oct 21, 2026
- Affected: from 9.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112901](https://cve.now/CVE-2026-112901): Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

- Severity: Medium 6.9
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112900](https://cve.now/CVE-2026-112900): Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

- Severity: Critical 9.2
- Published: Oct 19, 2026
- Affected: from 2.6.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112898](https://cve.now/CVE-2026-112898): Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

- Severity: Medium 6.9
- Published: Oct 19, 2026
- Affected: from 9.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112897](https://cve.now/CVE-2026-112897): Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 5.3.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112896](https://cve.now/CVE-2026-112896): Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

- Severity: High 8.8
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112895](https://cve.now/CVE-2026-112895): Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 5.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112894](https://cve.now/CVE-2026-112894): Pillow: Quadratic-time DoS in PDF save\_all (PdfParser.next\_object\_id)

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 5.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112893](https://cve.now/CVE-2026-112893): Pillow: Invalid free in FreeType glyph rendering when a stroker is active

- Severity: High 8.2
- Published: Oct 19, 2026
- Affected: from 10.0.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112892](https://cve.now/CVE-2026-112892): Pillow: MSP RLE decoder expands a tiny file into unbounded memory

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 4.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112891](https://cve.now/CVE-2026-112891): Pillow: Quadratic GIF comment copying during save

- Severity: Medium 6.9
- Published: Oct 19, 2026
- Affected: from 9.2.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112406](https://cve.now/CVE-2026-112406): Pillow: Infinite loop in PdfParser.rewrite\_pages on page tree Parent cycle

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 5.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112405](https://cve.now/CVE-2026-112405): Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 12.0.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112404](https://cve.now/CVE-2026-112404): Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

- Severity: High 8.8
- Published: Oct 19, 2026
- Affected: from 8.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112403](https://cve.now/CVE-2026-112403): Pillow: Heap buffer overflow in ImagingJpegDecode

- Severity: Critical 9.2
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112402](https://cve.now/CVE-2026-112402): Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112397](https://cve.now/CVE-2026-112397): Pillow: Out-of-bounds access in \_imagingmorph on a zero-width image

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112392](https://cve.now/CVE-2026-112392): Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

- Severity: High 8.2
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112401](https://cve.now/CVE-2026-112401): Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

- Severity: Medium 6.9
- Published: Oct 19, 2026
- Affected: from 5.4.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112400](https://cve.now/CVE-2026-112400): Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 9.2.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112399](https://cve.now/CVE-2026-112399): Pillow: APNG background disposal allocates full canvas before decompression bomb check

- Severity: High 8.7
- Published: Oct 19, 2026
- Affected: from 8.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112398](https://cve.now/CVE-2026-112398): Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

- Severity: Critical 9.2
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112396](https://cve.now/CVE-2026-112396): Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

- Severity: Medium 5.9
- Published: Oct 19, 2026
- Affected: from 11.3.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112395](https://cve.now/CVE-2026-112395): Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

- Severity: Medium 6.5
- Published: Oct 19, 2026
- Affected: from 8.2.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112394](https://cve.now/CVE-2026-112394): Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

- Severity: Medium 6.3
- Published: Oct 19, 2026
- Affected: fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112393](https://cve.now/CVE-2026-112393): Pillow: Heap buffer overflow in \_tiffWriteProc when saving TIFF to BytesIO

- Severity: Critical 9.2
- Published: Oct 19, 2026
- Affected: from 2.0.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112391](https://cve.now/CVE-2026-112391): Pillow: PdfParser can recurse without limit in get\_value() and linearize\_page\_tree()

- Severity: Medium 6.3
- Published: Oct 19, 2026
- Affected: from 5.1.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-112390](https://cve.now/CVE-2026-112390): Pillow: Infinite loop in MIC n\_frames when the embedded TIFF

- Severity: High 8.2
- Published: Oct 19, 2026
- Affected: from 7.2.0, fixed in 13.0.0.
- Fixed in 13.0.0 (released Oct 16, 2026, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-54058](https://cve.now/CVE-2026-54058): Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

- Severity: High 8.3
- Published: Jul 14, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59197](https://cve.now/CVE-2026-59197): Pillow: Heap out-of-bounds write in Pillow \`ImageFilter.RankFilter\` via integer overflow in \`ImagingExpand\`

- Severity: High 8.2
- Published: Jul 14, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59200](https://cve.now/CVE-2026-59200): Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: from 5.1.0, fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59198](https://cve.now/CVE-2026-59198): Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

- Severity: Medium 6.5
- Published: Jul 14, 2026
- Affected: from 5.2.0, fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59205](https://cve.now/CVE-2026-59205): Pillow: Controlled heap out-of-bounds write in \`ImageCmsTransform.apply()\` via output mode mismatch

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59203](https://cve.now/CVE-2026-59203): Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

- Severity: Medium 5.3
- Published: Jul 14, 2026
- Affected: from 12.0.0, fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59199](https://cve.now/CVE-2026-59199): Pillow: Heap out-of-bounds write \`Image.paste()\` / \`Image.crop()\` via signed coordinate overflow

- Severity: High 7.5
- Published: Jul 14, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-59204](https://cve.now/CVE-2026-59204): Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

- Severity: High 8.7
- Published: Jul 14, 2026
- Affected: from 8.2.0, fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 13 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-55379](https://cve.now/CVE-2026-55379): Pillow BdfFontFile\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via font loading

- Severity: High 7.5
- Published: Jul 6, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-55380](https://cve.now/CVE-2026-55380): Pillow GdImageFile decompression bomb protection bypass

- Severity: High 7.5
- Published: Jul 6, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-54060](https://cve.now/CVE-2026-54060): Pillow: \`FontFile.compile()\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\`

- Severity: High 7.5
- Published: Jul 6, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-54059](https://cve.now/CVE-2026-54059): Pillow: PcfFontFile.\_load\_bitmaps()\`: \`Image.frombytes()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via PCF…

- Severity: High 7.5
- Published: Jul 6, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-55798](https://cve.now/CVE-2026-55798): Pillow: WindowsViewer.get\_command() OS command injection via unescaped shell path

- Severity: Medium 4.5
- Published: Jul 6, 2026
- Affected: fixed in 12.3.0.
- Fixed in 12.3.0 (released Jul 1, 2026, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-42311](https://cve.now/CVE-2026-42311): Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

- Severity: High 8.6
- Published: May 9, 2026
- Affected: from 10.3.0, fixed in 12.2.0.
- Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-42310](https://cve.now/CVE-2026-42310): Pillow: PDF Parsing Trailer Infinite Loop (DoS)

- Severity: Medium 5.1
- Published: May 9, 2026
- Affected: from 4.2.0, fixed in 12.2.0.
- Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-42308](https://cve.now/CVE-2026-42308): Pillow: Integer overflow when processing fonts

- Severity: Medium 5.1
- Published: May 9, 2026
- Affected: fixed in 12.2.0.
- Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-42309](https://cve.now/CVE-2026-42309): Pillow: Heap buffer overflow with nested list coordinates

- Severity: Medium 5.1
- Published: May 9, 2026
- Affected: from 11.2.1, fixed in 12.2.0.
- Fixed in 12.2.0 (released Apr 1, 2026, 38 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-40192](https://cve.now/CVE-2026-40192): Pillow is vulnerable to a FITS GZIP decompression bomb

- Severity: High 8.7
- Published: Apr 15, 2026
- Affected: from 10.3.0, fixed in 12.2.0.
- Fixed in 12.2.0 (released Apr 1, 2026, 14 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2026-25990](https://cve.now/CVE-2026-25990): Pillow has an out-of-bounds write when loading PSD images

- Severity: High 8.6
- Published: Feb 11, 2026
- Affected: from 10.3.0, fixed in 12.1.1.
- Fixed in 12.1.1 (released Feb 11, 2026, the day of disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2025-48379](https://cve.now/CVE-2025-48379): Pillow Vulnerable to Write Buffer Overflow on BCn encoding

- Severity: High 7.1
- Published: Jul 1, 2025
- Affected: from 11.2.0, fixed in 11.3.0; from 11.2.0, fixed in 11.3.0.
- Fixed in 11.3.0 (released Jul 1, 2025, the day of disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2024-28219](https://cve.now/CVE-2024-28219): In \_imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

- Severity: Medium 6.7
- Published: Apr 3, 2024
- Affected: fixed in 10.3.0.
- Fixed in 10.3.0 (released Apr 1, 2024, 2 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2023-50447](https://cve.now/CVE-2023-50447): Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than…

- Severity: High 8.1
- Published: Jan 19, 2024
- Affected: fixed in 10.2.0.
- Fixed in 10.2.0 (released Jan 2, 2024, 17 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2023-44271](https://cve.now/CVE-2023-44271): An issue was discovered in Pillow before 10.0.0.

- Severity: Unrated
- Published: Nov 3, 2023
- Affected: fixed in 10.0.0; fixed in 10.0.0.
- Fixed in 10.0.0 (released Jul 1, 2023, 125 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2023-4863](https://cve.now/CVE-2023-4863): Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo

- Severity: High 8.8 · KEV
- Published: Sep 12, 2023
- Affected: fixed in 10.0.1.
- Fixed in 10.0.1 (released Sep 15, 2023, 3 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-45199](https://cve.now/CVE-2022-45199): Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.

- Severity: Unrated
- Published: Nov 14, 2022
- Affected: from 9.2.0, fixed in 9.3.0; from 9.2.0, fixed in 9.3.0.
- Fixed in 9.3.0 (released Oct 29, 2022, 16 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-45198](https://cve.now/CVE-2022-45198): Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

- Severity: Unrated
- Published: Nov 14, 2022
- Affected: fixed in 9.2.0; fixed in 9.2.0.
- Fixed in 9.2.0 (released Jul 1, 2022, 136 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-30595](https://cve.now/CVE-2022-30595): libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.

- Severity: Unrated
- Published: May 25, 2022
- Affected: from 9.1.0, fixed in 9.1.1.
- Fixed in 9.1.1 (released May 17, 2022, 8 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-24303](https://cve.now/CVE-2022-24303): Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

- Severity: Unrated
- Published: Mar 28, 2022
- Affected: fixed in 9.0.1.
- Fixed in 9.0.1 (released Feb 3, 2022, 53 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-22817](https://cve.now/CVE-2022-22817): PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.

- Severity: Critical 9.8
- Published: Jan 7, 2022
- Affected: fixed in 9.0.0; fixed in 9.0.1.
- Fixed in 9.0.1 (released Feb 3, 2022, 27 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-22816](https://cve.now/CVE-2022-22816): path\_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

- Severity: Unrated
- Published: Jan 7, 2022
- Affected: fixed in 9.0.0.
- Fixed in 9.0.0 (released Jan 2, 2022, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2022-22815](https://cve.now/CVE-2022-22815): path\_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

- Severity: Unrated
- Published: Jan 7, 2022
- Affected: fixed in 9.0.0.
- Fixed in 9.0.0 (released Jan 2, 2022, 5 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-23437](https://cve.now/CVE-2021-23437): Regular Expression Denial of Service (ReDoS)

- Severity: High 7.5
- Published: Sep 3, 2021
- Affected: from 5.2.0, fixed in 8.3.2; fixed in 8.3.2.
- Fixed in 8.3.2 (released Sep 2, 2021, 1 day before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-34552](https://cve.now/CVE-2021-34552): Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a…

- Severity: Unrated
- Published: Jul 13, 2021
- Affected: fixed in 8.3.0.
- Fixed in 8.3.0 (released Jul 1, 2021, 12 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-28677](https://cve.now/CVE-2021-28677): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-28678](https://cve.now/CVE-2021-28678): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: from 5.1.0, fixed in 8.2.0; fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25288](https://cve.now/CVE-2021-25288): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: fixed in 8.2.0; from 2.4.0, fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25287](https://cve.now/CVE-2021-25287): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: from 2.4.0, fixed in 8.2.0; fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-28675](https://cve.now/CVE-2021-28675): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-28676](https://cve.now/CVE-2021-28676): An issue was discovered in Pillow before 8.2.0.

- Severity: Unrated
- Published: Jun 2, 2021
- Affected: fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 62 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [GHSA-JGPV-4H4C-XHW3](https://cve.now/GHSA-JGPV-4H4C-XHW3): Uncontrolled Resource Consumption in pillow

- Severity: Medium
- Published: Apr 23, 2021
- Affected: fixed in 8.1.2.
- Fixed in 8.1.2 (released Mar 6, 2021, 48 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25293](https://cve.now/CVE-2021-25293): An issue was discovered in Pillow before 8.1.1.

- Severity: Unrated
- Published: Mar 19, 2021
- Affected: from 4.3.0, fixed in 8.1.1; fixed in 8.1.1.
- Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25292](https://cve.now/CVE-2021-25292): An issue was discovered in Pillow before 8.1.1.

- Severity: Unrated
- Published: Mar 19, 2021
- Affected: from 5.1.0, fixed in 8.1.1; fixed in 8.1.1.
- Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25291](https://cve.now/CVE-2021-25291): An issue was discovered in Pillow before 8.1.1.

- Severity: Unrated
- Published: Mar 19, 2021
- Affected: fixed in 8.1.1; fixed in 8.2.0.
- Fixed in 8.2.0 (released Apr 1, 2021, 13 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25290](https://cve.now/CVE-2021-25290): An issue was discovered in Pillow before 8.1.1.

- Severity: Unrated
- Published: Mar 19, 2021
- Affected: fixed in 8.1.1; fixed in 8.1.1.
- Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-25289](https://cve.now/CVE-2021-25289): An issue was discovered in Pillow before 8.1.1.

- Severity: Unrated
- Published: Mar 19, 2021
- Affected: fixed in 8.1.1; fixed in 8.1.1.
- Fixed in 8.1.1 (released Mar 2, 2021, 17 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-27921](https://cve.now/CVE-2021-27921): Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…

- Severity: Unrated
- Published: Mar 3, 2021
- Affected: fixed in 8.1.1; fixed in 8.1.2.
- Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-27922](https://cve.now/CVE-2021-27922): Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…

- Severity: Unrated
- Published: Mar 3, 2021
- Affected: fixed in 8.1.1; fixed in 8.1.2.
- Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2021-27923](https://cve.now/CVE-2021-27923): Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is…

- Severity: Unrated
- Published: Mar 3, 2021
- Affected: fixed in 8.1.1; fixed in 8.1.2.
- Fixed in 8.1.2 (released Mar 6, 2021, 3 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-35655](https://cve.now/CVE-2020-35655): In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length…

- Severity: Unrated
- Published: Jan 12, 2021
- Affected: from 4.3.0, fixed in 8.1.0; from 4.3.0, fixed in 8.1.0.
- Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-35654](https://cve.now/CVE-2020-35654): In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation…

- Severity: Unrated
- Published: Jan 12, 2021
- Affected: fixed in 8.1.0; fixed in 8.1.0.
- Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-35653](https://cve.now/CVE-2020-35653): In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is…

- Severity: Unrated
- Published: Jan 12, 2021
- Affected: fixed in 8.1.0; fixed in 8.1.0.
- Fixed in 8.1.0 (released Jan 2, 2021, 10 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-10177](https://cve.now/CVE-2020-10177): Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.

- Severity: Unrated
- Published: Jun 25, 2020
- Affected: fixed in 7.1.0; fixed in 7.1.0.
- Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-11538](https://cve.now/CVE-2020-11538): In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different…

- Severity: Unrated
- Published: Jun 25, 2020
- Affected: fixed in 7.1.0; fixed in 7.1.0.
- Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-10994](https://cve.now/CVE-2020-10994): In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.

- Severity: Unrated
- Published: Jun 25, 2020
- Affected: fixed in 7.1.0; fixed in 7.0.0.
- Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-10379](https://cve.now/CVE-2020-10379): In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.

- Severity: Unrated
- Published: Jun 25, 2020
- Affected: fixed in 7.1.0; fixed in 7.1.0.
- Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-10378](https://cve.now/CVE-2020-10378): In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-\>shuffle is…

- Severity: Unrated
- Published: Jun 25, 2020
- Affected: fixed in 7.1.0; fixed in 7.1.0.
- Fixed in 7.1.0 (released Apr 1, 2020, 85 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2019-19911](https://cve.now/CVE-2019-19911): There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit…

- Severity: Unrated
- Published: Jan 5, 2020
- Affected: fixed in 6.2.2; fixed in 6.2.2.
- Fixed in 6.2.2 (released Jan 2, 2020, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-5310](https://cve.now/CVE-2020-5310): libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

- Severity: Unrated
- Published: Jan 3, 2020
- Affected: fixed in 6.2.2; fixed in 6.2.2.
- Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-5311](https://cve.now/CVE-2020-5311): libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.

- Severity: Unrated
- Published: Jan 3, 2020
- Affected: fixed in 6.2.2; fixed in 6.2.2.
- Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-5312](https://cve.now/CVE-2020-5312): libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

- Severity: Unrated
- Published: Jan 3, 2020
- Affected: fixed in 6.2.2; fixed in 6.2.2.
- Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2020-5313](https://cve.now/CVE-2020-5313): libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.

- Severity: Unrated
- Published: Jan 3, 2020
- Affected: fixed in 6.2.2; fixed in 6.2.2.
- Fixed in 6.2.2 (released Jan 2, 2020, 1 day before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2019-16865](https://cve.now/CVE-2019-16865): An issue was discovered in Pillow before 6.2.0.

- Severity: Unrated
- Published: Oct 4, 2019
- Affected: fixed in 6.2.0; fixed in 6.2.0.
- Fixed in 6.2.0 (released Oct 1, 2019, 3 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-3076](https://cve.now/CVE-2016-3076): Heap-based buffer overflow in the j2k\_encode\_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of…

- Severity: Unrated
- Published: Apr 24, 2017
- Affected: from 2.5.0, fixed in 3.1.2.
- Fixed in 3.1.2 (released Apr 1, 2016, 388 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-9190](https://cve.now/CVE-2016-9190): Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an…

- Severity: Unrated
- Published: Nov 4, 2016
- Affected: fixed in 3.3.2.
- Fixed in 3.3.2 (released Oct 3, 2016, 32 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-9189](https://cve.now/CVE-2016-9189): Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related…

- Severity: Unrated
- Published: Nov 4, 2016
- Affected: fixed in 3.3.2.
- Fixed in 3.3.2 (released Oct 3, 2016, 32 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-4009](https://cve.now/CVE-2016-4009): Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have…

- Severity: Unrated
- Published: Apr 13, 2016
- Affected: fixed in 3.1.1.
- Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-2533](https://cve.now/CVE-2016-2533): Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier…

- Severity: Unrated
- Published: Apr 13, 2016
- Affected: fixed in 3.1.1.
- Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-0775](https://cve.now/CVE-2016-0775): Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a…

- Severity: Unrated
- Published: Apr 13, 2016
- Affected: fixed in 3.1.1.
- Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2016-0740](https://cve.now/CVE-2016-0740): Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to…

- Severity: Unrated
- Published: Apr 13, 2016
- Affected: fixed in 3.1.1.
- Fixed in 3.1.1 (released Feb 4, 2016, 69 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-3598](https://cve.now/CVE-2014-3598): The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

- Severity: Unrated
- Published: May 1, 2015
- Affected: fixed in 2.5.3.
- Fixed in 2.5.3 (released Aug 18, 2014, 256 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-9601](https://cve.now/CVE-2014-9601): Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size…

- Severity: Unrated
- Published: Jan 16, 2015
- Affected: fixed in 2.7.0.
- Fixed in 2.7.0 (released Jan 1, 2015, 15 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-3589](https://cve.now/CVE-2014-3589): PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a…

- Severity: Unrated
- Published: Aug 25, 2014
- Affected: fixed in 2.3.2; from 2.5, fixed in 2.5.2; fixed in 2.3.2; from 2.5, fixed in 2.5.2.
- Fixed in 2.3.2 (released Aug 13, 2014, 12 days before disclosure) and 2.5.2 (released Aug 13, 2014, 12 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-3007](https://cve.now/CVE-2014-3007): Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell…

- Severity: Unrated
- Published: Apr 27, 2014
- Affected: fixed in 2.5.0.
- Fixed in 2.5.0 (released Jul 1, 2014, 65 days after disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-1933](https://cve.now/CVE-2014-1933): The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses…

- Severity: Unrated
- Published: Apr 17, 2014
- Affected: fixed in 2.3.1.
- Fixed in 2.3.1 (released Mar 15, 2014, 33 days before disclosure).
- The latest release, 13.0.0, is not affected.

### [CVE-2014-1932](https://cve.now/CVE-2014-1932): The (1) load\_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py…

- Severity: Unrated
- Published: Apr 17, 2014
- Affected: fixed in 2.3.1.
- Fixed in 2.3.1 (released Mar 15, 2014, 33 days before disclosure).
- The latest release, 13.0.0, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/pillow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.