Red Hat: CVE-2026-96642: pillow: Pillow: Denial of Service via negative archive member size in TarIO

Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consum...

Red Hat: CVE-2026-96643: pillow: pillow: Denial of Service via repeated EXIF headers

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

Pillow resource management error vulnerability

Versions of Pillow prior to 13.0.0 contain a resource management error vulnerability. This vulnerability arises because the TarIO initializer in src/PIL/TarIO.py accepts negative octal member sizes and performs backward addressing, resulting in the return of the same 512-byte header. When the...

Pillow resource management error vulnerability

Versions 11.0.0 through 13.0.0 of Pillow contain a resource management error vulnerability. This vulnerability arises because Exif.load in src/PIL/Image.py repeatedly slices off remaining EXIF data when the data begins with a six-byte Exif header. Additionally, src/PIL/PngImagePlugin.py accepts P...

PT-2026-129113

Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consum...

PT-2026-129114

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

PT-2026-120820

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size, causing a backward seek that returns to the same 512-byte header. If the requested member name does not match, the pars...

PT-2026-129115

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using...

PT-2026-120822

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description On Windows, the src/PIL/WmfImagePlugin.py component passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler determines the size of a Device Independe...

CVE-2026-112899

When an application opens an untrusted Encapsulated PostScript file and asks Pillow to render it at a larger scale, Pillow has Ghostscript produce an image several times bigger than Pillow's configured size limit allows. The size check runs only after Ghostscript has finished rendering and writte...

Allocation of Resources Without Limits or Throttling

Overview Pillow is a PIL Python Imaging Library fork. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Ghostscript function in src/PIL/EpsImagePlugin.py, where a decompression bomb check is not applied before Ghostscript renders an E...

GHSA-VX6W-VV9F-6GVG Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

============================================================================ EPS loadscale lets Ghostscript render past the decompression bomb limit Location: src/PIL/EpsImagePlugin.py:92 in Ghostscript Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 contain a buffer error vulnerability. This vulnerability arises because src/PIL/WmfImagePlugin.py passes unvalidated 32-bit WMF or EMF sizes to the drawwmf handler in src/display.c. The handler allocates a DIB based on truncated 16-bit bcWidth and bcHeight field...

Pillow resource management error vulnerability

Versions of Pillow from 5.1.0 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because PdfParser.linearizepagetree in src/PIL/PdfParser.py fails to track repeated indirect references. When processing malicious PDFs that reference the same...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the FlashPix JPEG tile decoding spanning src/PIL/FpxImagePlugin.py and src/libImaging/JpegDecode.c, where the tile buffer is sized from the rawmode that the MODES table selects from the FPX color IDs, while...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via PdfParser.rewritepages in src/PIL/PdfParser.py when processing a PDF file whose /Parent chain contains a cycle. The function walks the /Parent chain of every pre-existing page upward, stopping only when it reaches a no...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via repeated string concatenation in the seek function of src/PIL/GifImagePlugin.py when parsing GIF comment extension blocks. An attacker can supply a GIF file containing many comment blocks, causing...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via linearizepagetree in src/PIL/PdfParser.py, where a PDF file containing a deeply nested page tree causes unbounded recursion that exhausts the call stack. An attacker can supply a malicious PDF with an...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the XBM image parser in src/PIL/XbmImagePlugin.py when processing a malformed XBM file. The previous implementation read up to 512 bytes of the file header and applied a regular expression...

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Summarydocling accepts serialized DoclingDocument JSON as an input format InputFormat.JSONDOCLING, enabled by default. A crafted JSON file can set a picture's image uri to a local file path. When the converted document is exported with embedded images ImageRefMode.EMBEDDED, the CLI default for...