Skip to content

cveboard RSS feed

python-pillow

Thursday, October 22
- GitHub CVE-2026-96639
  Pillow multi-frame loaders can reuse stale native image storage after mode transitions
  - python-pillow Pillow
  - Critical
  - CVSS 9.8
  - EPSS 0.57%
  - Fixed version listed
  16:00 UTC
Wednesday, October 21
- GitHub CVE-2026-112393
  Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
  - python-pillow Pillow
  - Critical
  - CVSS 9.2
  - EPSS 0.53%
  - Fixed version listed
  21:28 UTC
- GitHub CVE-2026-112900
  Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
  - python-pillow Pillow
  - Critical
  - CVSS 9.2
  - EPSS 0.43%
  - Fixed version listed
  19:58 UTC
Tuesday, October 20
- GitHub CVE-2026-112403
  Pillow: Heap buffer overflow in ImagingJpegDecode
  - python-pillow Pillow
  - Critical
  - CVSS 9.2
  - EPSS 0.32%
  - Fixed version listed
  20:40 UTC