Pillow

Everything BlueTeam Insider has reported about Pillow: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Pillow JPEG Buffer Overflow: Arbitrary Memory Writes in v12.3.0 and Earlier via Standard Lossless Files

BlueTeam InsiderOct 21, 2026

A critical buffer overflow in Pillow's JPEG decoder affects versions up to 12.3.0, allowing arbitrary memory writes via standard lossless image files.

Vulnerabilities

Pillow Heap Overflow in TIFF Handling Exposes Python Apps to Code Execution

BlueTeam InsiderOct 20, 2026

A critical heap buffer overflow in the Pillow library allows attackers to execute code when saving compressed TIFF images to in-memory buffers.