PyPI/pillow

Pillow buffer overflow in ImagingPcdDecode

Modified: 4/9/2026

Arbitrary Code Execution in Pillow

Modified: 9/10/2026

Pillow Uncontrolled Resource Consumption

Modified: 8/15/2025

Out-of-bounds read in Pillow

Modified: 6/6/2025

Out-of-bounds read in Pillow

Modified: 10/9/2024

Pillow buffer overflow vulnerability

Modified: 9/10/2026

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Modified: 9/10/2026

Infinite loop in Pillow

Modified: 12/5/2024

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Modified: 9/10/2026

Out of bounds write in Pillow

Modified: 10/8/2024

Uncontrolled Resource Consumption in Pillow

Modified: 10/8/2024

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Modified: 9/10/2026

Pillow has a heap buffer overflow with nested list coordinates

Modified: 9/10/2026

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Modified: 9/10/2026

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Modified: 9/10/2026

Buffer Overflow in Pillow

Modified: 10/9/2024

Out-of-bounds Read in Pillow

Modified: 10/9/2024

Potential infinite loop in Pillow

Modified: 10/14/2024

Buffer overflow in Pillow

Modified: 6/6/2025

Pillow Denial of Service vulnerability

Modified: 10/14/2024

Pillow command injection

Modified: 10/9/2024

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Modified: 9/10/2026

Arbitrary expression injection in Pillow

Modified: 10/14/2024

Out-of-bounds Write in Pillow

Modified: 10/8/2024

Pillow Buffer overflow in ImagingFliDecode

Modified: 10/9/2024

Pillow Denial of Service by Uncontrolled Resource Consumption

Modified: 8/15/2025

libwebp: OOB write in BuildHuffmanTable

Modified: 9/10/2026

Uncontrolled Resource Consumption in pillow

Modified: 10/9/2024

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Modified: 9/10/2026

Regular Expression Denial of Service (ReDoS) in Pillow

Modified: 10/9/2024

Path traversal in Pillow

Modified: 10/14/2024

Pillow affected by out-of-bounds write when loading PSD images

Modified: 9/10/2026

Pillow denial of service via Crafted Block Size

Modified: 10/8/2024

Out-of-bounds reads in Pillow

Modified: 10/9/2024

Pillow Denial of Service by Uncontrolled Resource Consumption

Modified: 8/15/2025

Pillow Out-of-bounds Read

Modified: 10/8/2024

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

Modified: 9/10/2026

Pillow denial of service

Modified: 10/9/2024

Pillow denial of service via PNG bomb

Modified: 10/9/2024

Pillow Out-of-bounds Read

Modified: 10/8/2024

Pillow Buffer overflow in ImagingLibTiffDecode

Modified: 10/9/2024

Out-of-bounds Read in Pillow

Modified: 10/8/2024

Insufficient Verification of Data Authenticity in Pillow

Modified: 10/14/2024

Buffer over-flow in Pillow

Modified: 11/26/2024

Pillow Integer overflow in ImagingResampleHorizontal

Modified: 10/8/2024

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

Modified: 11/29/2024

DOS attack in Pillow when processing specially crafted image files

Modified: 10/9/2024

Uncontrolled Resource Consumption in pillow

Modified: 12/2/2024

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

Modified: 9/10/2026

Pillow vulnerable to Data Amplification attack.

Modified: 10/14/2024

Out of bounds read in Pillow

Modified: 10/9/2024

Out of bounds read in Pillow

Modified: 10/9/2024

PCX P mode buffer overflow in Pillow

Modified: 10/8/2024

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Modified: 9/10/2026

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

Modified: 9/10/2026

Improper Initialization in Pillow

Modified: 10/14/2024

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Modified: 9/10/2026

Pillow subject to DoS via SAMPLESPERPIXEL tag

Modified: 10/14/2024

Uncontrolled Resource Consumption in Pillow

Modified: 10/14/2024

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

Modified: 9/10/2026

Buffer Copy without Checking Size of Input in Pillow

Modified: 10/8/2024

Pillow Temporary file name leakage

Modified: 4/13/2025

Pillow Integer overflow in Map.c

Modified: 10/8/2024

Pillow Out-of-bounds Read vulnerability

Modified: 10/9/2024

Pillow Buffer overflow in Jpeg2KEncode.c

Modified: 10/9/2024

Integer overflow in Pillow

Modified: 10/8/2024

Out-of-bounds reads in Pillow

Modified: 10/9/2024

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Modified: 9/10/2026

Pillow Out-of-bounds Write

Modified: 10/14/2024

Arbitrary code using "crafted image file" approach affecting Pillow

Modified: 10/8/2024

FITS GZIP decompression bomb in Pillow

Modified: 9/10/2026

Pillow has an integer overflow when processing fonts

Modified: 9/10/2026

PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

Modified: 10/9/2024

Pillow vulnerability can cause write buffer overflow on BCn encoding

Modified: 9/10/2026

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

Modified: 9/10/2026

Out-of-bounds Read in Pillow

Modified: 10/14/2024

Invalid-free in _dealloc

Modified: 11/9/2022

Segv on unknown address in jpeg_read_scanlines

Modified: 10/30/2022

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 11/8/2023

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 4/9/2026

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 6/10/2026

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 12/6/2023

Modified: 6/6/2025

Modified: 6/6/2025

Modified: 12/6/2023

Modified: 12/6/2023

Modified: 12/6/2023

Modified: 12/6/2023