Python Pillow any version

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow is vulnerable to a FITS GZIP decompression bomb

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow has an out-of-bounds write when loading PSD images

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)