Critical: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scorin...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

Critical: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

RHEL 8 : python-pillow (RHSA-2026:98109)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98109 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 8 : python-pillow (RHSA-2026:98111)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98111 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

TencentOS Server 3: python-pillow (TSSA-2026:1430)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1430 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

RHEL 8 : python-pillow (RHSA-2026:98120)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98120 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Amazon Linux 2 : python-pillow (ALAS-2026-4075)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4075 advisory. Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage;...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

A flaw was found in Pillow. A remote attacker can achieve arbitrary code execution by supplying a specially crafted FlashPix FPX image file to an application that processes untrusted inputs. Due to improper handling of image tile data during JPEG decoding, the library writes pixel data beyond the...

OESA-2026-4663 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816 Security Fixes: Pillow is a Python imaging library. Prior to 13.0.0,...

python-pillow security update

5.1.1-36 - CVE-2026-112900 python-pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE Resolves: RHEL-295960 5.1.1-35 - CVE-2026-112398 python-pillow: Pillow: Heap buffer overflow in FlashPix FPX JPEG decoding leads to code execution Resolves: RHEL-294549 5.1.1-34 ...

Oracle Linux 8 : python-pillow (ELSA-2026-93077)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93077 advisory. - CVE-2026-112900 python-pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE Resolves: RHEL-295960 - CVE-2026-112398...

MiracleLinux 8 : python-pillow-5.1.1-36.el8_10 (AXSA:2026-2231:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2231:03 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix F...

RLSA-2026:93077 Critical: python-pillow security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

AlmaLinux 8 : python-pillow (ALSA-2026:93077)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93077 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix FPX JP...