Security

Pillow advisories

The Python image library. Most Python programs that open a JPEG, PNG or TIFF do it with Pillow, Tetrak OCR included; it wraps libjpeg-turbo, libpng, libtiff and the others below

14 advisories recorded for Pillow (pillow on PyPI); the project is at https://github.com/python-pillow/Pillow. Newest first.

Published	Advisory	Reaches you	What sillybos does
2026-10-23	A FlashPix file runs code when opened, if olefile is installed CVE-2026-112398	by opening a file	Refused by default
2026-10-22	A SPIDER stack file bypasses the pixel limit on seek CVE-2026-96637	by opening a file	Refused by default
2026-10-22	A PNG's EXIF chunk makes parsing take quadratic time CVE-2026-96643	by opening a file	Refused by default
2026-10-22	A multi-frame file that changes colour mode writes into a buffer sized for the first frame CVE-2026-96639	by opening a file	Refused by default
2026-10-22	A later frame of an MPO or DCX file is never checked against the pixel limit CVE-2026-96636	by opening a file	Refused by default
2026-10-21	Saving a TIFF to memory overruns a heap buffer CVE-2026-112393	on a save path	Not reached by opening a file
2026-10-21	Pillow's PDF parser recurses without limit when appending CVE-2026-112391	on a save path	Not reached by opening a file
2026-10-21	An EPS file's name is passed to Ghostscript as an option CVE-2026-112900	by opening a file	Refused by default
2026-10-21	An animated PNG allocates its full canvas before the pixel limit is checked CVE-2026-112399	by opening a file	Refused by default
2026-10-21	A MIC file makes counting its frames loop for ever CVE-2026-112390	by opening a file	Refused by default
2026-10-21	A 512-byte XBM file stalls Image.open() for minutes CVE-2026-112901	by opening a file	Refused by default
2026-10-20	A tiled TIFF makes the decoder read past its tile buffer CVE-2026-112395	by opening a file	Refused with a setting
2026-10-20	A malformed compressed TIFF leaks heap memory into its pixels CVE-2026-112404	by opening a file	Refused with a setting
2026-10-20	A lossless JPEG overruns the decode buffer when scaled CVE-2026-112403	by opening a file	Refused by default

Back to the whole watch.