pillow 11.3.0

Direct Vulnerabilities

Known vulnerabilities in the pillow package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Out-of-bounds Write Affected versions of this package are vulnerable to Out-of-bounds Write in the `ImageFilter.RankFilter` process when a very large odd filter size is provided, leading to unchecked signed integer arithmetic in `ImagingExpand`. An attacker can cause a heap out-of-bounds write by supplying crafted input to the filter size parameter. How to fix Out-of-bounds Write? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the `decode` function of `PdfStream` in `PdfParser`, where zlib decompression is performed without limiting the output size. An attacker can cause excessive memory consumption by submitting a specially crafted PDF file with a maliciously large Length field. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `pillow` to version 12.3.0 or higher.	[5.1.0,12.3.0)
M Infinite loop Affected versions of this package are vulnerable to Infinite loop in the EPS file parsing process when handling the `%%BeginBinary` directive. An attacker can cause the application to enter an infinite loop by supplying a crafted EPS file with a negative byte count, resulting in resource exhaustion and denial of service. How to fix Infinite loop? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Out-of-bounds Read Affected versions of this package are vulnerable to Out-of-bounds Read in the `TGA RLE encoder` process. An attacker can access sensitive heap data and potentially cause limited denial of service by crafting a specially designed image file. How to fix Out-of-bounds Read? Upgrade `pillow` to version 12.3.0 or higher.	[5.2.0,12.3.0)
H Out-of-bounds Write Affected versions of this package are vulnerable to Out-of-bounds Write via the `apply` function. An attacker can cause memory corruption and potentially crash the application by providing an output image with a mode that does not match the transform's declared output mode. How to fix Out-of-bounds Write? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Memory Allocation with Excessive Size Value Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the `GdImageFile._open` process. An attacker can cause excessive memory allocation by supplying a crafted `.gd` file that bypasses decompression bomb checks. How to fix Memory Allocation with Excessive Size Value? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Memory Allocation with Excessive Size Value Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the `bdf_char` process when attacker-controlled dimensions from a BDF font file are passed to `Image.new()` without invoking the `_decompression_bomb_check` function. An attacker can cause excessive memory allocation by supplying specially crafted font files. How to fix Memory Allocation with Excessive Size Value? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
L Command Injection Affected versions of this package are vulnerable to Command Injection via the `get_command` function. An attacker can execute arbitrary commands by supplying a file path containing shell metacharacters. How to fix Command Injection? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Memory Allocation with Excessive Size Value Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the `FontFile.compile` process. An attacker can cause excessive memory allocation by providing a specially crafted font file that triggers uncontrolled resource consumption during image conversion or saving. How to fix Memory Allocation with Excessive Size Value? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
H Memory Allocation with Excessive Size Value Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the `PcfFontFile._load_bitmaps` process. An attacker can cause excessive memory allocation by supplying crafted PCF font data that bypasses decompression bomb checks. How to fix Memory Allocation with Excessive Size Value? Upgrade `pillow` to version 12.3.0 or higher.	[,12.3.0)
M Heap-based Buffer Overflow Affected versions of this package are vulnerable to Heap-based Buffer Overflow in `ImagePath.Path`, `ImageDraw.ImageDraw.polygon`, and `ImageDraw.ImageDraw.line`, all of which accept nested coordinates as input. An attacker can cause denial of service by supplying nested lists as coordinates, which are recursively unpacked beyond the allocated buffer. How to fix Heap-based Buffer Overflow? Upgrade `pillow` to version 12.2.0 or higher.	[11.2.1,12.2.0)
M Integer Overflow or Wraparound Affected versions of this package are vulnerable to Integer Overflow or Wraparound. An attacker can cause unexpected behavior by supplying a font where each glyph advances by an excessively large amount. How to fix Integer Overflow or Wraparound? Upgrade `pillow` to version 12.2.0 or higher.	[,12.2.0)
M Infinite loop Affected versions of this package are vulnerable to Infinite loop in trailer handling in `PIL/PdfParser.py`. An attacker can cause the application to consume excessive CPU by supplying a malicious file that creates a cyclic reference in the trailer's `Prev` pointer. How to fix Infinite loop? Upgrade `pillow` to version 12.2.0 or higher.	[4.2.0,12.2.0)
H Out-of-bounds Write Affected versions of this package are vulnerable to Out-of-bounds Write in the `_setimage()` functions in `encode.c` and `decode.c`, which are exploitable via `Image.open()`. An attacker can execute arbitrary code by supplying a malicious PSD image file with tile dimensions that trigger integer overflows. Note: This is a bypass for the vulnerability described in CVE-2026-25990. How to fix Out-of-bounds Write? Upgrade `pillow` to version 12.2.0 or higher.	[10.3.0,12.2.0)
H Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via decompression bomb, in `FitsGzipDecoder()`. An attacker can cause an OOM and crash the application or severely degrade its performance by supplying a malicious FITS file containing excessive GZIP-compressed data. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `pillow` to version 12.2.0 or higher.	[10.3.0,12.2.0)
H Out-of-bounds Write Affected versions of this package are vulnerable to Out-of-bounds Write in the `_setimage()` functions in `encode.c` and `decode.c`, which are exploitable via `Image.open()`. An attacker can execute arbitrary code by supplying a malicious PSD image file. How to fix Out-of-bounds Write? Upgrade `pillow` to version 12.1.1 or higher.	[10.3.0,12.1.1)

Vulnerability

Vulnerable Version

Out-of-bounds Write

Affected versions of this package are vulnerable to Out-of-bounds Write in the ImageFilter.RankFilter process when a very large odd filter size is provided, leading to unchecked signed integer arithmetic in ImagingExpand. An attacker can cause a heap out-of-bounds write by supplying crafted input to the filter size parameter.

How to fix Out-of-bounds Write?