Security Advisories for pillow in pypi
Critical
about 10 hours ago
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
pypi
pillow
Moderate
about 10 hours ago
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
pypi
Pillow
High
1 day ago
Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer
pypi
Pillow
High
1 day ago
Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)
pypi
Pillow
High
1 day ago
Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
pypi
Pillow
Critical
1 day ago
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
pypi
Pillow
Moderate
1 day ago
Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode
pypi
pillow
High
1 day ago
Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS
pypi
pillow
Moderate
1 day ago
Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
pypi
Pillow
High
2 days ago
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
pypi
Pillow
Critical
2 days ago
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
pypi
Pillow
Moderate
2 days ago
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
pypi
pillow
High
2 days ago
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
pypi
Pillow
High
2 days ago
Pillow: APNG background disposal allocates full canvas before decompression bomb check
pypi
Pillow
Moderate
2 days ago
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
pypi
Pillow
Moderate
2 days ago
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
pypi
Pillow
Moderate
2 days ago
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
pypi
Pillow
Moderate
2 days ago
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
pypi
Pillow
High
2 days ago
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
pypi
Pillow
High
2 days ago
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
pypi
pillow
High
2 days ago
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
pypi
pillow
High
2 days ago
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
pypi
Pillow
Moderate
3 days ago
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
pypi
Pillow
Critical
3 days ago
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
pypi
Pillow
High
3 days ago
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
pypi
Pillow
Moderate
3 days ago
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
pypi
Pillow
High
3 days ago
Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
pypi
Pillow
High
3 days ago
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
pypi
Pillow
High
3 days ago
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
pypi
pillow
Moderate
3 days ago
Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
pypi
pillow
High
3 days ago
Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
pypi
Pillow
High
3 months ago
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
pypi
pillow
High
3 months ago
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
pypi
pillow
Moderate
3 months ago
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
pypi
pillow
High
3 months ago
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
pypi
Pillow
Moderate
3 months ago
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
pypi
Pillow
High
3 months ago
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
pypi
Pillow
Moderate
3 months ago
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
pypi
Pillow
High
3 months ago
Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
pypi
pillow
High
3 months ago
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
pypi
pillow
High
3 months ago
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
pypi
pillow
High
6 months ago
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
pypi
pillow
High
over 1 year ago
Pillow vulnerability can cause write buffer overflow on BCn encoding
pypi
pillow
High
about 3 years ago
libwebp: OOB write in BuildHuffmanTable
go, nuget, cargo, pypi, npm
github.com/chai2010/webp, magick.net-q8-x64, magick.net-q8-openmp-x64, magick.net-q8-anycpu, magick.net-q16-x64, magick.net-q16-hdri-anycpu, magick.net-q16-anycpu, webp, Pillow, SkiaSharp, electron, libwebp-sys, libwebp-sys2
High
over 4 years ago
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
pypi
pillow