python-pillow Pillow vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202657

Newest CVEs

• CVE-2026-114501

  Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

  python-pillow · Pillow

  Medium6.3
• CVE-2026-96639

  Pillow multi-frame loaders can reuse stale native image storage after mode transitions

  python-pillow · Pillow

  Critical9.8
• CVE-2026-96636

  Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

  python-pillow · Pillow

  Medium6.5
• CVE-2026-96640

  Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

  python-pillow · Pillow

  High8.2
• CVE-2026-96637

  Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

  python-pillow · Pillow

  High7.1
• CVE-2026-96778

  Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

  python-pillow · Pillow

  High7.7
• CVE-2026-96643

  Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

  python-pillow · Pillow

  High7.1
• CVE-2026-96644

  Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

  python-pillow · Pillow

  High7.1
• CVE-2026-96641

  Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

  python-pillow · Pillow

  Medium6.5
• CVE-2026-96642

  Pillow: TarIO negative size field causes infinite CPU-spin loop

  python-pillow · Pillow

  High7.1