pillow has 42 CVEs on record between 2021 and 2026. Disclosure cadence is accelerating: 34 in the last 90 days against 4 in the 90 before. The busiest recent month was October 2026 with 34. The median CVSS is 7.5 (high), with 5 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-125 (5) and CWE-400 (5).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 34 prev 4
Worst active — by depth score
CVE-2026-112398Critical· 9.8Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution66CVE-2026-112403Critical· 9.8Pillow: Heap buffer overflow in ImagingJpegDecode66CVE-2026-112900Critical· 9.2Pillow: Argument Injection in Ghostscript call, potentially leading into RCE63CVE-2026-112393Critical· 9.2Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO63CVE-2026-96644High· 8.1Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)57
pillow vulnerabilities
CVEs affecting pillow, newest first. Open any entry for full detail, references, and exploit status.
42 CVEsRSS
CVE-2026-112896High· 7.1PoCPillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
CVE-2026-112400High· 7.5PoCPillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
CVE-2026-112403Critical· 9.8PoCPillow: Heap buffer overflow in ImagingJpegDecode
Pillow: Heap buffer overflow in ImagingJpegDecode
CVE-2026-112397High· 7.5PoCPillow: Out-of-bounds access in _imagingmorph on a zero-width image
Pillow: Out-of-bounds access in _imagingmorph on a zero-width image
CVE-2026-59198Medium· 6.5Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
CVE-2026-59203Medium· 5.3Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
CVE-2026-55798Medium· 4.5Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
CVE-2026-54059High· 7.5Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF f…
Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
CVE-2026-42309Medium· 5.5Pillow has a heap buffer overflow with nested list coordinates
Pillow has a heap buffer overflow with nested list coordinates
CVE-2024-28219Medium· 6.7Pillow buffer overflow vulnerability
Pillow buffer overflow vulnerability
CVE-2023-50447High· 8.1Arbitrary Code Execution in Pillow
Arbitrary Code Execution in Pillow
GHSA-jgpv-4h4c-xhw3High· 7.5Duplicate Advisory: Uncontrolled Resource Consumption in pillow
Duplicate Advisory: Uncontrolled Resource Consumption in pillow