Vulnerabilities for pillow

No release of pillow is currently known to be free of vulnerabilities.

Details

• GHSA-9hw9-ch79-4vh62026-07-20

  Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

  Fixed in: 12.3.0

• GHSA-vjc4-5qp5-m44j2026-07-20

  Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

  Fixed in: 12.3.0

• GHSA-pg7v-jwj7-p7982026-07-20

  Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

  Fixed in: 12.3.0

• GHSA-jjj6-mw9f-p5652026-07-20

  Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

  Fixed in: 12.3.0

• GHSA-6r8x-57c9-28j42026-07-20

  Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

  Fixed in: 12.3.0

• GHSA-fj7v-r99m-22gq2026-07-20

  Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

  Fixed in: 12.3.0

• GHSA-xj96-63gp-2gmr2026-07-20

  Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

  Fixed in: 12.3.0

• GHSA-4x4j-2g7c-83w62026-07-20

  Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

  Fixed in: 12.3.0

• GHSA-phj9-mv4w-65pm2026-07-20

  Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

  Fixed in: 12.3.0

• GHSA-45hq-cxwh-f6vc2026-07-20

  Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

  Fixed in: 12.3.0

• GHSA-5x94-69rx-g8h22026-07-20

  Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

  Fixed in: 12.3.0

• GHSA-8v84-f9pq-wr9x2026-07-20

  Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

  Fixed in: 12.3.0

• GHSA-62p4-gmf7-7g932026-07-20

  Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

  Fixed in: 12.3.0

• GHSA-pwv6-vv43-88gr2026-05-04

  Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

  Fixed in: 12.2.0

• GHSA-r73j-pqj5-w3x72026-05-04

  Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

  Fixed in: 12.2.0

• GHSA-wjx4-4jcj-g98j2026-05-04

  Pillow has an integer overflow when processing fonts

  Fixed in: 12.2.0

• GHSA-5xmw-vc9v-4wf22026-05-04

  Pillow has a heap buffer overflow with nested list coordinates

  Fixed in: 12.2.0

• GHSA-whj4-6x5x-4v2j2026-04-13

  FITS GZIP decompression bomb in Pillow

  Fixed in: 12.2.0

• GHSA-cfh3-3jmp-rvhc2026-02-11

  Pillow affected by out-of-bounds write when loading PSD images

  Fixed in: 12.1.1

• GHSA-xg8h-j46f-w9522025-07-01

  Pillow vulnerability can cause write buffer overflow on BCn encoding

  Fixed in: 11.3.0, 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09, ef98b3510e3e4f14b547762764813d7e5ca3c5a4

• GHSA-44wm-f244-xhp32024-04-03

  Pillow buffer overflow vulnerability

  Fixed in: 10.3.0

• GHSA-3f63-hfp8-52jq2024-01-19

  Arbitrary Code Execution in Pillow

  Fixed in: 10.2.0

• GHSA-8ghj-p4vj-mr352023-11-03

  Pillow Denial of Service vulnerability

  Fixed in: 10.0.0, 1fe1bb49c452b0318cad12ea9d97c3bef188e9a7

• PYSEC-2023-1752023-09-20

  Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.

  Fixed in: 10.0.1

• GHSA-j7hp-h8jx-5ppr2023-09-12

  libwebp: OOB write in BuildHuffmanTable

  Fixed in: 0.1.8, 0.9.3, 22.3.24, 24.8.3, 25.8.1, 26.2.1, 27.0.0-beta.2, 2.88.6, 1.4.0, 10.0.1, 0.2.6, 13.3.0, 0.0.0-20250406010349-76805d5a8860, 1.1.2-0.20250406010349-76805d5a8860

• GHSA-m2vv-5vj5-2hm72022-11-14

  Pillow vulnerable to Data Amplification attack.

  Fixed in: 9.2.0, 11918eac0628ec8ac0812670d9838361ead2d6a4

• GHSA-q4mp-jvh2-76fj2022-11-14

  Pillow subject to DoS via SAMPLESPERPIXEL tag

  Fixed in: 9.3.0, 2444cddab2f83f28687c7c20871574acbb6dbcf3

• OSV-2022-10742022-10-22

  Invalid-free in _dealloc

  Fixed in: f7363c1091c70356d92e56abfca6b65bef9e7b26

• OSV-2022-7152022-08-15

  Segv on unknown address in jpeg_read_scanlines

  Fixed in: 9887544fafcd13cc8afcfa0c6d0f2e6facc1a8b8

• GHSA-hr8g-f6r6-mr222022-05-26

  Buffer over-flow in Pillow

  Fixed in: 9.1.1

• GHSA-r7rm-8j6h-r9332022-05-24

  Buffer Copy without Checking Size of Input in Pillow

  Fixed in: 6.2.2, a79b65c47c7dc6fe623aadf09aa6192fc54548f3

• GHSA-8m9x-pxwq-j2362022-05-17

  Pillow command injection

  Fixed in: 2.5.0

• GHSA-v9pc-9mvp-x87g2022-05-17

  Pillow Buffer overflow in Jpeg2KEncode.c

  Fixed in: 3.1.2

• GHSA-x895-2wrm-hvp72022-05-17

  PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

  Fixed in: 2.3.1, 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7

• GHSA-h5rf-vgqx-wjv22022-05-14

  Pillow denial of service via PNG bomb

  Fixed in: 2.7.0

• GHSA-cfmr-38g9-f2h72022-05-14

  Pillow denial of service via Crafted Block Size

  Fixed in: 2.3.2, 2.5.2, 205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d

• GHSA-j6f7-g425-4gmx2022-05-14

  Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

  Fixed in: 2.5.3

• GHSA-4fx9-vc88-q2xc2022-03-11

  Infinite loop in Pillow

  Fixed in: 9.0.0

• GHSA-9j59-75qj-795w2022-03-11

  Path traversal in Pillow

  Fixed in: 9.0.1

• GHSA-pw3c-h7wp-cvhx2022-01-12

  Improper Initialization in Pillow

  Fixed in: 9.0.0

• GHSA-xrcv-f9gm-v42c2022-01-12

  Out-of-bounds Read in Pillow

  Fixed in: 9.0.0

• GHSA-8vj2-vxx3-667w2022-01-12

  Arbitrary expression injection in Pillow

  Fixed in: 9.0.1, 9.0.0

• GHSA-p49h-hjvm-jg3h2021-11-03

  PCX P mode buffer overflow in Pillow

  Fixed in: 6.2.2, 93b22b846e0269ee9594ff71a72bec02d2bea8fd

• GHSA-3xv8-3j54-hgrp2021-11-03

  Out-of-bounds read in Pillow

  Fixed in: 7.1.0, 6a83e4324738bb0452fbe8074a995b1c73f08de7

• GHSA-vcqg-3p29-xw732021-11-03

  Integer overflow in Pillow

  Fixed in: 6.2.2, 4e2def2539ec13e53a82e06c4b3daf00454100c4

• GHSA-7534-mm45-c74v2021-10-05

  Buffer Overflow in Pillow

  Fixed in: 8.3.0

• GHSA-98vv-pw6r-q6q42021-09-07

  Uncontrolled Resource Consumption in pillow

  Fixed in: 8.3.2, 9e08eb8f78fdfd2f476e1b20b7cf38683754866b

• GHSA-q5hq-fp76-qmrc2021-06-08

  Uncontrolled Resource Consumption in Pillow

  Fixed in: 8.2.0

• GHSA-rwv7-3v45-hg292021-06-08

  Pillow Out-of-bounds Read vulnerability

  Fixed in: 8.2.0

• GHSA-hjfx-8p6c-g7gx2021-06-08

  Insufficient Verification of Data Authenticity in Pillow

  Fixed in: 8.2.0

• GHSA-g6rj-rv7j-xwp42021-06-08

  Pillow denial of service

  Fixed in: 8.2.0

• GHSA-77gc-v2xv-rvvh2021-06-08

  Out-of-bounds Read in Pillow

  Fixed in: 8.2.0

• GHSA-7r7m-5h27-29hp2021-06-08

  Potential infinite loop in Pillow

  Fixed in: 8.2.0

• GHSA-jgpv-4h4c-xhw32021-04-23

  Uncontrolled Resource Consumption in pillow

  Fixed in: 8.1.2

• GHSA-mvg9-xffr-p7742021-03-29

  Out of bounds read in Pillow

  Fixed in: 8.2.0, 8.1.1

• GHSA-9hx2-hgq2-2g4f2021-03-29

  Regular Expression Denial of Service (ReDoS) in Pillow

  Fixed in: 8.1.1

• GHSA-8xjq-8fcg-g5hw2021-03-29

  Out-of-bounds Write in Pillow

  Fixed in: 8.1.1

• GHSA-p43w-g3c5-g5mq2021-03-29

  Out of bounds read in Pillow

  Fixed in: 8.1.1

• GHSA-57h3-9rgr-c24m2021-03-29

  Out of bounds write in Pillow

  Fixed in: 8.1.1

• GHSA-f5g8-5qq7-938w2021-03-18

  Pillow Out-of-bounds Read

  Fixed in: 8.1.0

• GHSA-hf64-x4gq-p99h2021-03-18

  Pillow Out-of-bounds Read

  Fixed in: 8.1.0

• GHSA-vqcj-wrf2-7v732021-03-18

  Pillow Out-of-bounds Write

  Fixed in: 8.1.0

• GHSA-3wvg-mj6g-m9cv2021-03-18

  Pillow Uncontrolled Resource Consumption

  Fixed in: 8.1.2, 8.1.1

• GHSA-f4w8-cv6p-x6r52021-03-18

  Pillow Denial of Service by Uncontrolled Resource Consumption

  Fixed in: 8.1.2, 8.1.1

• GHSA-95q3-8gr9-gm8w2021-03-18

  Pillow Denial of Service by Uncontrolled Resource Consumption

  Fixed in: 8.1.2, 8.1.1

• GHSA-cqhg-xjhh-p8hf2020-07-27

  Out-of-bounds reads in Pillow

  Fixed in: 7.1.0

• GHSA-8843-m7mw-mxqm2020-07-27

  Buffer overflow in Pillow

  Fixed in: 7.1.0, 46f4a349b88915787fea3fb91348bb1665831bbb

• GHSA-vj42-xq3r-hr3r2020-07-27

  Out-of-bounds reads in Pillow

  Fixed in: 7.1.0, 7.0.0

• GHSA-43fq-w8qq-v88h2020-07-27

  Out-of-bounds read in Pillow

  Fixed in: 7.1.0

• GHSA-r854-96gq-rfg32020-05-18

  Pillow Temporary file name leakage

  Fixed in: 2.3.1, 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7

• GHSA-5gm3-px64-rw722020-04-01

  Uncontrolled Resource Consumption in Pillow

  Fixed in: 6.2.2

• GHSA-hj69-c76v-86wr2020-04-01

  Out-of-bounds Read in Pillow

  Fixed in: 6.2.2, a09acd0decd8a87ccce939d5ff65dab59e7d365b

• GHSA-j7mj-748x-7p782019-10-22

  DOS attack in Pillow when processing specially crafted image files

  Fixed in: 6.2.0

• GHSA-hvr8-466p-75rh2018-07-24

  Pillow Integer overflow in ImagingResampleHorizontal

  Fixed in: 3.1.1, 4e0d9b0b9740d258ade40cce248c93777362ac1e

• GHSA-8xjv-v9xq-m5h92018-07-24

  Pillow Buffer overflow in ImagingFliDecode

  Fixed in: 3.1.1, 893a40850c2d5da41537958e40569c029a6e127b

• GHSA-3c5c-7235-994j2018-07-24

  Pillow buffer overflow in ImagingPcdDecode

  Fixed in: 3.1.1, 5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9, ae453aa18b66af54e7ff716f4ccb33adca60afd4

• GHSA-rwr3-c2q8-gm562018-07-24

  Pillow Integer overflow in Map.c

  Fixed in: 3.3.2

• GHSA-hggx-3h72-49ww2018-07-24

  Pillow Buffer overflow in ImagingLibTiffDecode

  Fixed in: 3.1.1, 6dcbf5bd96b717c58d7b642949da8d323099928e

• GHSA-w4vg-rf63-f3j32018-07-12

  Arbitrary code using "crafted image file" approach affecting Pillow

  Fixed in: 3.3.2