| Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionCVE-2026-112398 · GHSA-5X8W-8JJ5-Q52HVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIOCVE-2026-112393 · GHSA-332P-7HRC-92WF |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitCVE-2026-112899 · GHSA-VX6W-VV9F-6GVG |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow has a heap buffer overflow with nested list coordinatesCVE-2026-42309 · GHSA-5XMW-VC9V-4WF2Version ranges need review. |
pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| FITS GZIP decompression bomb in PillowCVE-2026-40192 · GHSA-WHJ4-6X5X-4V2JVersion ranges need review. |
pillowLightspeed Core/lightspeed-core/rag-tool-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow buffer overflow vulnerabilityCVE-2024-28219 · GHSA-44WM-F244-XHP3Version ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
High
|
Fix reported |
|
| PIL and Pillow Vulnerable to Symlink Attack on TmpfilesCVE-2014-1932 · GHSA-X895-2WRM-HVP7Version ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow denial of service via Crafted Block SizeCVE-2014-3589 · GHSA-CFMR-38G9-F2H7Version ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow command injectionCVE-2014-3007 · GHSA-8M9X-PXWQ-J236Version ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Pillow denial of service via PNG bombCVE-2014-9601 · GHSA-H5RF-VGQX-WJV2Version ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow buffer overflow in ImagingPcdDecodeCVE-2016-2533 · GHSA-3C5C-7235-994JVersion ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow Denial of Service by Uncontrolled Resource ConsumptionCVE-2021-27923 · GHSA-95Q3-8GR9-GM8WVersion ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow Denial of Service by Uncontrolled Resource ConsumptionCVE-2021-27921 · GHSA-F4W8-CV6P-X6R5Version ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow Uncontrolled Resource ConsumptionCVE-2021-27922 · GHSA-3WVG-MJ6G-M9CVVersion ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
High
|
Fix reported |
|
| Out-of-bounds read in PillowCVE-2020-10378 · GHSA-3XV8-3J54-HGRPVersion ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
High
|
Fix reported |
|
| Pillow Temporary file name leakageCVE-2014-1933 · GHSA-R854-96GQ-RFG3Version ranges need review. |
pillowRed Hat Enterprise Linux 5/python-imaging |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in PillowCVE-2021-28677 · GHSA-Q5HQ-FP76-QMRCVersion ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
High
|
Fix reported |
|
| Insufficient Verification of Data Authenticity in PillowCVE-2021-28678 · GHSA-HJFX-8P6C-G7GXVersion ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Improper Initialization in PillowCVE-2022-22815 · GHSA-PW3C-H7WP-CVHXVersion ranges need review. |
pillowRed Hat Enterprise Linux 7/python-pillow |
PyPIRed Hat |
Medium
|
Fix reported |
|
