Python Pillow vulnerabilities
111 published vulnerabilities in Python Pillow. The most were published in 2026 (57), and 57 so far in 2026.
Python Pillow vulnerabilities by year
2014
2016
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Python Pillow vulnerabilities
- CVE-2014-3007 Pillow command injection
- CVE-2026-96639 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
- CVE-2022-30595 Buffer over-flow in Pillow
- CVE-2022-22817 Arbitrary expression injection in Pillow
- CVE-2021-34552 Buffer Overflow in Pillow
- CVE-2021-25289 Out of bounds write in Pillow
- CVE-2020-5311 Buffer Copy without Checking Size of Input in Pillow
- CVE-2020-5312 PCX P mode buffer overflow in Pillow
- CVE-2016-4009 Pillow Integer overflow in ImagingResampleHorizontal
- CVE-2026-112393 Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
- CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
- CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.