Product by Ubuntu
Pillow
16 known vulnerabilities in Pillow (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-54058 | Python-pillow Pillow: Out-of-bounds Read | 9.1 | |
| High | CVE-2026-59197 | Python-pillow Pillow: Integer Overflow or Wraparound | 8.2 | |
| High | CVE-2026-55379 | Python-pillow Pillow: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2026-55380 | Pillow GdImageFile decompression bomb protection bypass | 7.5 | |
| High | CVE-2026-59204 | Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service | 7.5 | |
| High | CVE-2026-54060 | Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` | 7.5 | |
| High | CVE-2026-54059 | Python-pillow Pillow: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2026-59203 | Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service | 7.5 | |
| High | CVE-2026-59205 | Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch | 7.5 | |
| High | CVE-2026-59199 | Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow | 7.5 | |
| High | CVE-2026-59200 | Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() | 7.5 | |
| High | CVE-2026-59198 | Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images | 7.5 | |
| High | CVE-2026-42311 | Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow) | 7.8 | |
| Medium | CVE-2026-42310 | Pillow: PDF Parsing Trailer Infinite Loop (DoS) | 5.5 | |
| Medium | CVE-2026-42309 | Pillow: Heap buffer overflow with nested list coordinates | 5.5 | |
| Medium | CVE-2026-42308 | Pillow: Integer overflow when processing fonts | 5.5 |