Iniciar sesión
Deutsch English Español Polski
Alta

Out-of-bounds reads in Pillow

  • Publicada: 25.06.2020
  • Actualizado: 11.10.2026 11:20

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) pillow < 7.1.0 7.1.0

Referencias

Puntuación CVSS 5.5/10
Vector CVSS
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Debilidad (CWE)
CWE-125
Plataforma
Python (PyPI)
Paquete
pillow
Publicada
25.06.2020
Actualizado
11.10.2026 11:20

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2020-76 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-cqhg-xjhh-p8hf - CC BY 4.0

Historial de vulnerabilidades: pillow

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (82) en el archivo
Entradas en total
82
Primera → última
04.2014 10.2026
Sin corrección
0
Explotada en ataques
1

Distribución por gravedad

  • Crítica 11
  • Alta 53
  • Media 16
  • Baja 1
  • Sin evaluar 1

Divulgaciones por año

antes: 12

Gravedad:
  1. Pillow: Acceso fuera de límites en _imagingmorph con una imagen de ancho cero
    Alta CVE-2026-112397 < 13.0.0 13.0.0
  2. Pillow: la búsqueda en GIF mantiene el tamaño rechazado tras DecompressionBombError, permitiendo DoS
    Alta CVE-2026-112400 >= 9.2.0, < 13.0.0 13.0.0
  3. Pillow: Recursión ilimitada al analizar un árbol de páginas o una cadena de trailer de PDF (corrección incompleta para CVE-2026-42310)
    Alta CVE-2026-112895 >= 5.1.0, < 13.0.0 13.0.0
  4. Pillow: Desbordamiento de búfer en el montículo en ImagingJpegDecode
    Crítica CVE-2026-112403 < 13.0.0 13.0.0
  5. Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
    Alta CVE-2026-59204 >= 8.2.0, < 12.3.0 12.3.0
  6. Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
    Alta · 7.5 CVE-2026-59200 >= 5.1.0, < 12.3.0 12.3.0
  7. Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
    Alta CVE-2026-54058 < 12.3.0 12.3.0
  8. Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
    Alta · 8.2 CVE-2026-59197 < 12.3.0 12.3.0
  9. Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
    Alta · 7.5 CVE-2026-59205 < 12.3.0 12.3.0
  10. Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
    Alta · 7.5 CVE-2026-59199 < 12.3.0 12.3.0
  11. Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
    Alta · 7.5 CVE-2026-54060 < 12.3.0 12.3.0
  12. Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
    Alta · 7.5 CVE-2026-54059 < 12.3.0 12.3.0
  13. Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
    Alta · 7.5 CVE-2026-55379 < 12.3.0 12.3.0
  14. Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
    Alta · 7.5 CVE-2026-55380 < 12.3.0 12.3.0
  15. Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
    Alta CVE-2026-42311 >= 10.3.0, < 12.2.0 12.2.0
  16. FITS GZIP decompression bomb in Pillow
    Alta · 7.5 CVE-2026-40192 >= 10.3.0, < 12.2.0 12.2.0
  17. Pillow affected by out-of-bounds write when loading PSD images
    Alta CVE-2026-25990 >= 10.3.0, < 12.1.1 12.1.1
  18. Pillow vulnerability can cause write buffer overflow on BCn encoding
    Alta · 7.1 CVE-2025-48379 >= 11.2.0, < 11.3.0 11.3.0
  19. Pillow buffer overflow vulnerability
    Alta · 6.7 CVE-2024-28219 < 10.3.0 10.3.0
  20. Arbitrary Code Execution in Pillow
    Crítica · 8.1 CVE-2023-50447 < 10.2.0 10.2.0
  21. An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of
    Alta · 7.5 CVE-2023-44271 < 10.0.0 10.0.0
  22. libwebp: OOB write in BuildHuffmanTable
    Alta · 8.8 Explotada en ataques CVE-2023-4863 < 10.0.1 10.0.1
  23. Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
    Alta · 7.5 CVE-2022-45199 >= 9.2.0, < 9.3.0 9.3.0
  24. Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
    Alta · 7.5 CVE-2022-45198 < 9.2.0 9.2.0
  25. Buffer over-flow in Pillow
    Alta · 7.5 CVE-2022-30595 >= 9.1.0, < 9.1.1 9.1.1
  26. Path traversal in Pillow
    Alta · 9.1 CVE-2022-24303 < 9.0.1 9.0.1
  27. Arbitrary expression injection in Pillow
    Crítica · 9.8 CVE-2022-22817 < 9.0.1 9.0.1
  28. Uncontrolled Resource Consumption in pillow
    Alta · 7.5 CVE-2021-23437 >= 5.2.0, < 8.3.2 8.3.2
  29. Buffer Overflow in Pillow
    Crítica · 9.8 CVE-2021-34552 < 8.3.0 8.3.0
  30. Uncontrolled Resource Consumption in Pillow
    Alta · 7.5 CVE-2021-28677 < 8.2.0 8.2.0
  31. Potential infinite loop in Pillow
    Alta · 7.5 CVE-2021-28676 < 8.2.0 8.2.0
  32. Pillow Out-of-bounds Read vulnerability
    Alta · 9.1 CVE-2021-25288 >= 2.4.0, < 8.2.0 8.2.0
  33. Out-of-bounds Read in Pillow
    Alta · 9.1 CVE-2021-25287 >= 2.4.0, < 8.2.0 8.2.0
  34. Pillow denial of service
    Alta · 5.5 CVE-2021-28675 < 8.2.0 8.2.0
  35. Out of bounds read in Pillow
    Alta · 7.5 CVE-2021-25293 >= 4.3.0, < 8.1.1 8.1.1
  36. Out of bounds read in Pillow
    Alta · 7.5 CVE-2021-25291 < 8.2.0 8.2.0
  37. Out-of-bounds Write in Pillow
    Alta · 7.5 CVE-2021-25290 < 8.1.1 8.1.1
  38. Out of bounds write in Pillow
    Crítica · 9.8 CVE-2021-25289 < 8.1.1 8.1.1
  39. Pillow Denial of Service by Uncontrolled Resource Consumption
    Alta · 7.5 CVE-2021-27923 < 8.1.2 8.1.2
  40. Pillow Uncontrolled Resource Consumption
    Alta · 7.5 CVE-2021-27922 < 8.1.2 8.1.2
  41. Pillow Denial of Service by Uncontrolled Resource Consumption
    Alta · 7.5 CVE-2021-27921 < 8.1.2 8.1.2
  42. Pillow Out-of-bounds Write
    Alta · 8.8 CVE-2020-35654 < 8.1.0 8.1.0
  43. Pillow Out-of-bounds Read
    Alta · 7.1 CVE-2020-35653 < 8.1.0 8.1.0
  44. In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
    Alta · 7.8 CVE-2020-10379 < 7.1.0 7.1.0
  45. In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
    Alta · 5.5 CVE-2020-10378 < 7.1.0 7.1.0
  46. Out-of-bounds read in Pillow
    Crítica · 8.1 CVE-2020-11538 < 7.1.0 7.1.0
  47. Out-of-bounds reads in Pillow
    Alta · 5.5 CVE-2020-10994 < 7.1.0 7.1.0
  48. Out-of-bounds reads in Pillow esta entrada
    Alta · 5.5 CVE-2020-10177 < 7.1.0 7.1.0
  49. Uncontrolled Resource Consumption in Pillow
    Alta · 7.5 CVE-2019-19911 < 6.2.2 6.2.2
  50. Out-of-bounds Read in Pillow
    Alta · 7.1 CVE-2020-5313 < 6.2.2 6.2.2
  51. PCX P mode buffer overflow in Pillow
    Crítica · 9.8 CVE-2020-5312 < 6.2.2 6.2.2
  52. Buffer Copy without Checking Size of Input in Pillow
    Crítica · 9.8 CVE-2020-5311 < 6.2.2 6.2.2
  53. Integer overflow in Pillow
    Crítica · 8.8 CVE-2020-5310 < 6.2.2 6.2.2
  54. DOS attack in Pillow when processing specially crafted image files
    Alta · 7.5 CVE-2019-16865 < 6.2.0 6.2.0
  55. Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
    Alta · 5.5 CVE-2016-3076 >= 2.5.0, < 3.1.2 3.1.2
  56. Arbitrary code using "crafted image file" approach affecting Pillow
    Alta · 7.8 CVE-2016-9190 < 3.3.2 3.3.2
  57. Pillow buffer overflow in ImagingPcdDecode
    Alta · 6.5 CVE-2016-2533 < 3.1.1 3.1.1
  58. Pillow Integer overflow in ImagingResampleHorizontal
    Crítica · 9.8 CVE-2016-4009 < 3.1.1 3.1.1
  59. Pillow Buffer overflow in ImagingFliDecode
    Alta · 6.5 CVE-2016-0775 < 3.1.1 3.1.1
  60. The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
    Alta · 7.5 CVE-2014-3598 < 2.5.3 2.5.3
  61. Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
    Alta · 7.5 CVE-2014-9601 < 2.7.0 2.7.0
  62. PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
    Alta · 7.5 CVE-2014-3589 < 2.3.2, >= 2.5, < 2.5.2 2.3.2, 2.5.2
  63. Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibl
    Crítica · 9.8 CVE-2014-3007 < 2.5.0 2.5.0
  64. The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (P
    Alta · 7.7 CVE-2014-1932 < 2.3.1 2.3.1

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.