Product by Debian
Pillow
28 known vulnerabilities in Pillow (Debian), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-5311 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2020-5312 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2022-22817 | Pillow: security vulnerability | 9.8 | |
| Critical | CVE-2021-34552 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2022-24303 | Pillow: security vulnerability | 9.1 | |
| High | CVE-2021-23437 | Regular Expression Denial of Service (ReDoS) | 7.5 | |
| Medium | CVE-2016-2533 | Pillow: Buffer Overflow | 6.5 | |
| High | CVE-2020-5313 | Pillow: Buffer Overflow | 7.1 | |
| High | CVE-2021-25290 | Pillow: security vulnerability | 7.5 | |
| High | CVE-2023-50447 | Pillow: Code Execution | 8.1 | |
| Medium | CVE-2022-22815 | Pillow: security vulnerability | 6.5 | |
| High | CVE-2019-19911 | Pillow: security vulnerability | 7.5 | |
| Medium | CVE-2016-0740 | Pillow: Buffer Overflow | 6.5 | |
| Medium | CVE-2016-0775 | Pillow: Buffer Overflow | 6.5 | |
| High | CVE-2016-9190 | Pillow: Code Execution | 7.8 | |
| Medium | CVE-2022-22816 | Pillow: Buffer Over-read | 6.5 | |
| High | CVE-2020-35653 | Pillow: Buffer Over-read | 7.1 | |
| High | CVE-2023-44271 | Pillow: Denial of Service | 7.5 | |
| High | CVE-2026-40192 | Pillow is vulnerable to a FITS GZIP decompression bomb | 7.5 | |
| High | CVE-2022-45198 | Pillow: security vulnerability | 7.5 | |
| Medium | CVE-2016-9189 | Pillow: Integer Overflow | 5.5 | |
| Medium | CVE-2020-10177 | Pillow: Out-of-Bounds Read | 5.5 | |
| Medium | CVE-2024-28219 | Pillow: Buffer Overflow | 6.7 | |
| High | CVE-2026-25990 | Pillow has an out-of-bounds write when loading PSD images | 7.5 | |
| Not rated | CVE-2014-3589 | Pillow: Denial of Service | — |