# cve.now: Python-pillow

The newest entries naming Python-pillow as an affected vendor (up to 200), of 60 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112902](https://cve.now/CVE-2026-112902.md): Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags (CVSS 8.3)
- [CVE-2026-112899](https://cve.now/CVE-2026-112899.md): Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit (CVSS 6.3)
- [CVE-2026-114501](https://cve.now/CVE-2026-114501.md): Pillow: Arrow export leaks stale heap memory when PILLOW\_ALIGNMENT \> 1 (CVSS 6.3)
- [CVE-2026-96639](https://cve.now/CVE-2026-96639.md): Pillow multi-frame loaders can reuse stale native image storage after mode transitions (CVSS 9.8)
- [CVE-2026-96636](https://cve.now/CVE-2026-96636.md): Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) (CVSS 6.5)
- [CVE-2026-96640](https://cve.now/CVE-2026-96640.md): Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion (CVSS 8.2)
- [CVE-2026-96637](https://cve.now/CVE-2026-96637.md): Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS (CVSS 7.1)
- [CVE-2026-96778](https://cve.now/CVE-2026-96778.md): Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer (CVSS 7.7)
- [CVE-2026-96643](https://cve.now/CVE-2026-96643.md): Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time (CVSS 7.1)
- [CVE-2026-96644](https://cve.now/CVE-2026-96644.md): Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds) (CVSS 7.1)
- [CVE-2026-96641](https://cve.now/CVE-2026-96641.md): Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise (CVSS 6.5)
- [CVE-2026-96642](https://cve.now/CVE-2026-96642.md): Pillow: TarIO negative size field causes infinite CPU-spin loop (CVSS 7.1)
- [CVE-2026-96638](https://cve.now/CVE-2026-96638.md): Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode (CVSS 6.5)
- [CVE-2026-112901](https://cve.now/CVE-2026-112901.md): Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes (CVSS 6.9)
- [CVE-2026-112900](https://cve.now/CVE-2026-112900.md): Pillow: Argument Injection in Ghostscript call, potentially leading into RCE (CVSS 9.2)
- [CVE-2026-112898](https://cve.now/CVE-2026-112898.md): Pillow: Image.quantize() with empty palette leaks uninitialized stack memory (CVSS 6.9)
- [CVE-2026-112897](https://cve.now/CVE-2026-112897.md): Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips (CVSS 8.7)
- [CVE-2026-112896](https://cve.now/CVE-2026-112896.md): Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read (CVSS 8.8)
- [CVE-2026-112895](https://cve.now/CVE-2026-112895.md): Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) (CVSS 8.7)
- [CVE-2026-112894](https://cve.now/CVE-2026-112894.md): Pillow: Quadratic-time DoS in PDF save\_all (PdfParser.next\_object\_id) (CVSS 8.7)
- [CVE-2026-112893](https://cve.now/CVE-2026-112893.md): Pillow: Invalid free in FreeType glyph rendering when a stroker is active (CVSS 8.2)
- [CVE-2026-112892](https://cve.now/CVE-2026-112892.md): Pillow: MSP RLE decoder expands a tiny file into unbounded memory (CVSS 8.7)
- [CVE-2026-112891](https://cve.now/CVE-2026-112891.md): Pillow: Quadratic GIF comment copying during save (CVSS 6.9)
- [CVE-2026-112406](https://cve.now/CVE-2026-112406.md): Pillow: Infinite loop in PdfParser.rewrite\_pages on page tree Parent cycle (CVSS 8.7)
- [CVE-2026-112405](https://cve.now/CVE-2026-112405.md): Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 (CVSS 8.7)
- [CVE-2026-112404](https://cve.now/CVE-2026-112404.md): Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels (CVSS 8.8)
- [CVE-2026-112403](https://cve.now/CVE-2026-112403.md): Pillow: Heap buffer overflow in ImagingJpegDecode (CVSS 9.2)
- [CVE-2026-112402](https://cve.now/CVE-2026-112402.md): Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform (CVSS 8.7)
- [CVE-2026-112397](https://cve.now/CVE-2026-112397.md): Pillow: Out-of-bounds access in \_imagingmorph on a zero-width image (CVSS 8.7)
- [CVE-2026-112392](https://cve.now/CVE-2026-112392.md): Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images (CVSS 8.2)
- [CVE-2026-112401](https://cve.now/CVE-2026-112401.md): Pillow: Quadratic GIF comment concatenation allows DoS in Image.open() (CVSS 6.9)
- [CVE-2026-112400](https://cve.now/CVE-2026-112400.md): Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS (CVSS 8.7)
- [CVE-2026-112399](https://cve.now/CVE-2026-112399.md): Pillow: APNG background disposal allocates full canvas before decompression bomb check (CVSS 8.7)
- [CVE-2026-112398](https://cve.now/CVE-2026-112398.md): Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVSS 9.2)
- [CVE-2026-112396](https://cve.now/CVE-2026-112396.md): Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer (CVSS 5.9)
- [CVE-2026-112395](https://cve.now/CVE-2026-112395.md): Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290) (CVSS 6.5)
- [CVE-2026-112394](https://cve.now/CVE-2026-112394.md): Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size (CVSS 6.3)
- [CVE-2026-112393](https://cve.now/CVE-2026-112393.md): Pillow: Heap buffer overflow in \_tiffWriteProc when saving TIFF to BytesIO (CVSS 9.2)
- [CVE-2026-112391](https://cve.now/CVE-2026-112391.md): Pillow: PdfParser can recurse without limit in get\_value() and linearize\_page\_tree() (CVSS 6.3)
- [CVE-2026-112390](https://cve.now/CVE-2026-112390.md): Pillow: Infinite loop in MIC n\_frames when the embedded TIFF (CVSS 8.2)
- [CVE-2026-54058](https://cve.now/CVE-2026-54058.md): Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) (CVSS 8.3)
- [CVE-2026-59197](https://cve.now/CVE-2026-59197.md): Pillow: Heap out-of-bounds write in Pillow \`ImageFilter.RankFilter\` via integer overflow in \`ImagingExpand\` (CVSS 8.2)
- [CVE-2026-59200](https://cve.now/CVE-2026-59200.md): Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() (CVSS 7.5)
- [CVE-2026-59198](https://cve.now/CVE-2026-59198.md): Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images (CVSS 6.5)
- [CVE-2026-59205](https://cve.now/CVE-2026-59205.md): Pillow: Controlled heap out-of-bounds write in \`ImageCmsTransform.apply()\` via output mode mismatch (CVSS 7.5)
- [CVE-2026-59203](https://cve.now/CVE-2026-59203.md): Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service (CVSS 5.3)
- [CVE-2026-59199](https://cve.now/CVE-2026-59199.md): Pillow: Heap out-of-bounds write \`Image.paste()\` / \`Image.crop()\` via signed coordinate overflow (CVSS 7.5)
- [CVE-2026-59204](https://cve.now/CVE-2026-59204.md): Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service (CVSS 8.7)
- [CVE-2026-55379](https://cve.now/CVE-2026-55379.md): Pillow BdfFontFile\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via font loading (CVSS 7.5)
- [CVE-2026-55380](https://cve.now/CVE-2026-55380.md): Pillow GdImageFile decompression bomb protection bypass (CVSS 7.5)
- [CVE-2026-54060](https://cve.now/CVE-2026-54060.md): Pillow: \`FontFile.compile()\`: \`Image.new()\` called without \`\_decompression\_bomb\_check()\` (CVSS 7.5)
- [CVE-2026-54059](https://cve.now/CVE-2026-54059.md): Pillow: PcfFontFile.\_load\_bitmaps()\`: \`Image.frombytes()\` called without \`\_decompression\_bomb\_check()\` — bomb protection bypass via PCF font loading (CVSS 7.5)
- [CVE-2026-55798](https://cve.now/CVE-2026-55798.md): Pillow: WindowsViewer.get\_command() OS command injection via unescaped shell path (CVSS 4.5)
- [CVE-2026-42311](https://cve.now/CVE-2026-42311.md): Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow) (CVSS 8.6)
- [CVE-2026-42310](https://cve.now/CVE-2026-42310.md): Pillow: PDF Parsing Trailer Infinite Loop (DoS) (CVSS 5.1)
- [CVE-2026-42308](https://cve.now/CVE-2026-42308.md): Pillow: Integer overflow when processing fonts (CVSS 5.1)
- [CVE-2026-42309](https://cve.now/CVE-2026-42309.md): Pillow: Heap buffer overflow with nested list coordinates (CVSS 5.1)
- [CVE-2026-40192](https://cve.now/CVE-2026-40192.md): Pillow is vulnerable to a FITS GZIP decompression bomb (CVSS 8.7)
- [CVE-2026-25990](https://cve.now/CVE-2026-25990.md): Pillow has an out-of-bounds write when loading PSD images (CVSS 8.6)
- [CVE-2025-48379](https://cve.now/CVE-2025-48379.md): Pillow Vulnerable to Write Buffer Overflow on BCn encoding (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/python-pillow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.