Pillow — CVE history (PyPI)
Pillow
21 CVEs affect the Pillow PyPI package (highest CVSS 9.8). Latest disclosed: 2026-05-09. Full CVE history sourced from NVD.
Summary
- Package
Pillow(PyPI)- Total CVEs
21- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.8- Latest disclosed
- 2026-05-09
Recent CVEs (top 20)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42311 | High | 7.8 | — | 2026-05-09 | Pillow is a Python imaging library. |
CVE-2026-42310 | Medium | 5.5 | — | 2026-05-09 | Pillow is a Python imaging library. |
CVE-2026-42309 | Medium | 5.5 | — | 2026-05-09 | Pillow is a Python imaging library. |
CVE-2026-42308 | Medium | 5.5 | — | 2026-05-09 | Pillow is a Python imaging library. |
CVE-2026-40192 | — | — | — | 2026-04-15 | Pillow is a Python imaging library. |
CVE-2026-25990 | High | 7.5 | — | 2026-02-11 | Pillow is a Python imaging library. |
CVE-2025-48379 | High | 7.1 | — | 2025-07-01 | Pillow is a Python imaging library. |
CVE-2021-23437 | High | 7.5 | — | 2021-09-03 | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
CVE-2016-3076 | Medium | 5.5 | — | 2017-04-24 | Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file. |
CVE-2016-9190 | High | 7.8 | — | 2016-11-04 | Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component. |
CVE-2016-9189 | Medium | 5.5 | — | 2016-11-04 | Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component. |
CVE-2016-4009 | Critical | 9.8 | — | 2016-04-13 | Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow. |
CVE-2016-2533 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file. |
CVE-2016-0775 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file. |
CVE-2016-0740 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. |
CVE-2014-3598 | — | — | — | 2015-05-01 | The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image. |
CVE-2014-9601 | — | — | — | 2015-01-16 | Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. |
CVE-2014-3589 | — | — | — | 2014-08-25 | PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size. |
CVE-2014-3007 | — | — | — | 2014-04-27 | Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py. |
CVE-2014-1933 | — | — | — | 2014-04-17 | The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct sy… |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2016-4009 | Critical | 9.8 | — | 2016-04-13 | Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow. |
CVE-2026-42311 | High | 7.8 | — | 2026-05-09 | Pillow is a Python imaging library. |
CVE-2016-9190 | High | 7.8 | — | 2016-11-04 | Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component. |
CVE-2026-25990 | High | 7.5 | — | 2026-02-11 | Pillow is a Python imaging library. |
CVE-2021-23437 | High | 7.5 | — | 2021-09-03 | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
CVE-2025-48379 | High | 7.1 | — | 2025-07-01 | Pillow is a Python imaging library. |
CVE-2016-2533 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file. |
CVE-2016-0775 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file. |
CVE-2016-0740 | Medium | 6.5 | — | 2016-04-13 | Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. |
CVE-2026-42310 | Medium | 5.5 | — | 2026-05-09 | Pillow is a Python imaging library. |