Known vulnerabilities in Pillow

Software: Pillow
Software CPE: cpe:2.3:a:alex_clark_and_contributors:pillow:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pillow Pillow is affected by 53 known vulnerabilities: 14 high, 37 medium, 2 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137009 - Resource exhaustion
CVE-2026-59200
CWE-400 Medium
No
No
12.3.0 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59203
CWE-835 Medium
No
No
12.3.0 07.07.2026 SB2026070342
SB2026072428
#VU137007 - Allocation of Resources Without Limits or Throttling
CVE-2026-59204
CWE-770 Medium
No
No
12.3.0 07.07.2026 SB2026070342
SB2026071741
SB2026072516
and 6 more
#VU137006 - Out-of-bounds read
CVE-2026-54058
CWE-125 High
No
No
12.3.0 07.07.2026 SB2026070342
SB2026071741
SB2026071949
and 12 more
#VU137005 - Heap-based Buffer Overflow
CVE-2026-59197
CWE-122 High
No
No
12.2.0 07.07.2026 SB2026041113
SB2026071741
SB2026071949
and 12 more
#VU137004 - Out-of-bounds read
CVE-2026-59198
CWE-125 Medium
No
No
12.2.0 07.07.2026 SB2026041113
SB2026071741
SB2026072428
and 7 more
#VU137003 - Heap-based Buffer Overflow
CVE-2026-59199
CWE-122 Medium
No
No
12.3.0 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU137002 - Heap-based Buffer Overflow
CVE-2026-59205
CWE-122 Medium
No
No
12.3.0 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 6 more
#VU136861 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-55798
CWE-78 Medium
No
No
12.3.0 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 1 more
#VU136860 - Uncontrolled Memory Allocation
CVE-2026-55379
CWE-789 Medium
No
No
12.3.0 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136859 - Uncontrolled Memory Allocation
CVE-2026-54059
CWE-789 Medium
No
No
12.3.0 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136858 - Uncontrolled Memory Allocation
CVE-2026-54060
CWE-789 Medium
No
No
12.3.0 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU136857 - Uncontrolled Memory Allocation
CVE-2026-55380
CWE-789 Medium
No
No
12.3.0 03.07.2026 SB2026070342
SB2026070815
SB2026070816
and 14 more
#VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310
CWE-835 Medium
No
No
12.2.0 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU127175 - Integer overflow
CVE-2026-42308
CWE-190 Medium
No
No
12.2.0 23.04.2026 SB2026041113
SB2026061950
SB2026061951
and 5 more
#VU127174 - Heap-based Buffer Overflow
CVE-2026-42309
CWE-122 Medium
No
No
12.2.0 23.04.2026 SB2026041113
#VU125817 - Resource exhaustion
CVE-2026-40192
CWE-400 Medium
No
No
12.2.0 11.04.2026 SB2026041113
SB2026041807
SB2026041808
and 8 more
#VU123113 - Out-of-bounds write
CVE-2026-25990
CWE-787 High
No
No
12.1.1 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU113003 - Heap-based Buffer Overflow
CVE-2025-48379
CWE-122 Low
No
No
11.3.0 16.07.2025 SB20250716130
SB2025082202
SB2025091519
and 2 more
#VU88063 - Memory corruption
CVE-2024-28219
CWE-119 Medium
No
No
10.3.0 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more


Showing elements 1 - 20 out of 53