PyPI Package Vulnerabilities

Open in search

Vulnerabilities associated with pillow.

Packages

Clear package

Showing 25 vulnerabilities on this page for pillow

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

CWE-125Jul 14, 2026
CVSS8.3v4.0EPSS0.476%PoCs0SignalsSTIX

Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.

CWE-787Jul 14, 2026
CVSS7.5v3.1EPSS0.385%PoCs0SignalsSTIX

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.

CWE-835Jul 14, 2026
CVSS5.3v3.1EPSS0.399%PoCs0SignalsSTIX

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.

CWE-770CWE-789Jul 14, 2026
CVSS8.7v4.0EPSS0.393%PoCs0SignalsSTIX

Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.

CWE-789Jul 6, 2026
CVSS7.5v3.1EPSS0.421%PoCs0SignalsSTIX

Pillow GdImageFile decompression bomb protection bypass

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.

CWE-789Jul 6, 2026
CVSS7.5v3.1EPSS0.418%PoCs0SignalsSTIX

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.

CWE-789Jul 6, 2026
CVSS7.5v3.1EPSS0.418%PoCs0SignalsSTIX

Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.

CWE-789Jul 6, 2026
CVSS7.5v3.1EPSS0.41%PoCs0SignalsSTIX

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

CWE-190CWE-787May 9, 2026
CVSS8.6v4.0EPSS0.15%PoCs0SignalsSTIX

Pillow: PDF Parsing Trailer Infinite Loop (DoS)

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0.

CWE-835May 9, 2026
CVSS5.1v4.0EPSS0.126%PoCs0SignalsSTIX

Pillow: Integer overflow when processing fonts

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

CWE-190May 9, 2026
CVSS5.1v4.0EPSS0.114%PoCs0SignalsSTIX

Pillow: Heap buffer overflow with nested list coordinates

Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polygon and ImageDraw.ImageDraw.line could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This issue has been patched in version 12.2.0.

CWE-122May 9, 2026
CVSS5.1v4.0EPSS0.133%PoCs0SignalsSTIX

Pillow is vulnerable to a FITS GZIP decompression bomb

Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround.

CWE-400CWE-409CWE-770Apr 15, 2026
CVSS8.7v4.0EPSS0.671%PoCs0SignalsSTIX

Pillow has an out-of-bounds write when loading PSD images

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

CWE-787Feb 11, 2026
CVSS8.6v4.0EPSS0.367%PoCs0SignalsSTIX

Pillow Vulnerable to Write Buffer Overflow on BCn encoding

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.

CWE-122Jul 1, 2025
CVSS7.1v3.1EPSS0.267%PoCs0SignalsSTIX

Pillow buffer overflow vulnerability

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

CWE-120CWE-676CWE-680Apr 3, 2024
CVSS-v4.0EPSS0.997%PoCs0SignalsSTIX

Pillow Denial of Service vulnerability

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

CWE-400CWE-770Nov 3, 2023
CVSS-v4.0EPSS1.13%PoCs0SignalsSTIX

Pillow subject to DoS via SAMPLESPERPIXEL tag

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.

CWE-400Nov 14, 2022
CVSS-v4.0EPSS1.11%PoCs0SignalsSTIX

Pillow vulnerable to Data Amplification attack.

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

CWE-409Nov 14, 2022
CVSS-v4.0EPSS1.19%PoCs0SignalsSTIX

Improper Initialization in Pillow

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

CWE-665Jan 7, 2022
CVSS-v4.0EPSS2.56%PoCs0SignalsSTIX

Arbitrary expression injection in Pillow

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.

CWE-74Jan 7, 2022
CVSS-v4.0EPSS3.4%PoCs0SignalsSTIX

Out-of-bounds Read in Pillow

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

CWE-125Jan 7, 2022
CVSS-v4.0EPSS1.96%PoCs0SignalsSTIX

Regular Expression Denial of Service (ReDoS)

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

CWE-125CWE-400Sep 3, 2021
CVSS-v4.0EPSS3.15%PoCs0SignalsSTIX

Buffer Overflow in Pillow

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.

CWE-120Jul 13, 2021
CVSS-v4.0EPSS3.16%PoCs0SignalsSTIX

Uncontrolled Resource Consumption in Pillow

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.

CWE-400Jun 2, 2021
CVSS-v4.0EPSS2.29%PoCs0SignalsSTIX