Search: 13.3-13

Pillow versions prior to 13.0.0 contain a vulnerability in the TarIO initializer where a negative octal member size causes a backward seek to the same 512-byte header. If the requested member name does not match, the parser repeatedly reads the header, consuming a full CPU core and causing the process to hang indefinitely. This issue affects only applications that directly use PIL.TarIO.TarIO rather than the standard Image.open() method. The vulnerability is fixed in version 13.0.0.

Pillow versions prior to 13.0.0 contain a vulnerability in the PILfont text-width accumulation code where negative glyph advances are not properly checked, leading to a signed integer overflow. This can cause logic errors or excessive resource consumption in applications using text size calculations. The issue is fixed in version 13.0.0.

A high-severity vulnerability (CVE-2026-96778) affects the Pillow Python imaging library in versions from 9.4.0 up to 13.0.0. The vulnerability relates to the ImagingJp component. The CVSS 4.0 base score is 7.7, indicating a high impact with network attack vector, low attack complexity, and partial user interaction required. The vulnerability impacts confidentiality, integrity, and availability. No public exploits or patches are currently documented in the provided data.

A high-severity vulnerability (CVE-2026-96644) affects the Pillow Python imaging library on Windows platforms prior to version 13.0.0. The vulnerability has a CVSS 4.0 base score of 7.1, indicating a network-exploitable issue with low attack complexity and no privileges required, but requires user interaction. The impact is high, though no public exploits or vendor patch information are provided in the data.

A high-severity vulnerability (CVE-2026-96643) affects the Pillow Python imaging library in versions from 11.0.0 up to 13.0.0. The issue relates to the Exif.load functionality, though specific technical details are not fully provided. The CVSS 4.0 score is 7.1, indicating a significant security risk. The vulnerability is present in multiple Ubuntu package versions of Pillow. No public exploit or patch information is currently available.

A vulnerability exists in the Pillow Python imaging library affecting versions from 9.1.0 up to but not including 13.0.0. The issue relates to the BmpRleDec component. The CVSS 3.1 base score is 6.5, indicating a medium severity impact primarily affecting availability. No public exploits or known active exploitation have been reported. The affected versions include specific Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.

A vulnerability in the python-pillow Pillow library versions 11.2.1 up to but not including 13.0.0 allows disclosure of sensitive information. The flaw is due to improper handling of image row alignment during Arrow export, which causes uninitialized or stale memory to be included in the exported buffer. This can result in leakage of pixel data or other process memory between users. The issue is fixed in version 13.0.0.

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.

CVE-2026-96636 is a denial of service vulnerability in the python-pillow Pillow library affecting versions before 13.0.0. The flaw arises because decompression-bomb protection is only applied on the first frame of multi-frame images, and the MPO and DCX image plugins do not re-check frame size limits when seeking to subsequent frames. This allows crafted MPO or DCX images with a small first frame but an extremely large subsequent frame to bypass memory exhaustion protections, leading to excessive memory use and potential process crashes.

A vulnerability in the python-pillow Pillow library versions 5.1.0 through 12.x allows an attacker to cause uncontrolled resource consumption. The PdfParser.linearize_page_tree() function treats a PDF /Pages graph as a tree without tracking duplicate indirect references, leading to exponential expansion of page references when processing a crafted PDF. This results in disproportionate CPU usage during the append operation. The issue is fixed in version 13.0.0.

A resource consumption vulnerability exists in python-pillow Pillow versions prior to 13.0.0. The SpiderImageFile.seek() function can reparse a later SPIDER stack frame and replace the image size without rerunning the decompression bomb check, allowing an attacker to declare very large image dimensions. This can cause excessive memory allocation, potentially consuming multiple gigabytes of memory. The issue is fixed in version 13.0.0.