Product by Python Software Foundation
Pillow
105 known vulnerabilities in Pillow (Python Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
105
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2016-4009 | Pillow: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2020-5311 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2020-5312 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2026-112900 | Pillow: Argument Injection in Ghostscript call, potentially leading into RCE | 9.8 | |
| Critical | CVE-2022-22817 | Pillow: security vulnerability | 9.8 | |
| Critical | CVE-2021-34552 | Pillow: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-25287 | Pillow: Out-of-Bounds Read | 9.1 | |
| Critical | CVE-2022-30595 | Pillow: Heap-Based Buffer Overflow | 9.8 | |
| High | CVE-2021-27922 | Pillow: Denial of Service | 7.5 | |
| Critical | CVE-2022-24303 | Pillow: security vulnerability | 9.1 | |
| Critical | CVE-2026-112393 | Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO | 9.8 | |
| Critical | CVE-2021-25289 | Pillow: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2026-112403 | Pillow: Heap buffer overflow in ImagingJpegDecode | 9.8 | |
| Critical | CVE-2021-25288 | Pillow: Out-of-Bounds Read | 9.1 | |
| Critical | CVE-2026-96639 | Pillow multi-frame loaders can reuse stale native image storage after mode transitions | 9.8 | |
| High | CVE-2021-23437 | Regular Expression Denial of Service (ReDoS) | 7.5 | |
| High | CVE-2021-27921 | Pillow: Denial of Service | 7.5 | |
| High | CVE-2019-16865 | Pillow: security vulnerability | 7.5 | |
| High | CVE-2021-27923 | Pillow: Denial of Service | 7.5 | |
| Medium | CVE-2016-2533 | Pillow: Buffer Overflow | 6.5 | |
| High | CVE-2020-11538 | Pillow: Out-of-Bounds Read | 8.1 | |
| High | CVE-2020-5310 | Pillow: Integer Overflow | 8.8 | |
| High | CVE-2020-5313 | Pillow: Buffer Overflow | 7.1 | |
| High | CVE-2021-28676 | Pillow: Infinite Loop | 7.5 | |
| High | CVE-2021-28677 | Pillow: security vulnerability | 7.5 |