PYSEC-2026-4342

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

PYSEC-2026-4342

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the load method in src/PIL/Image.py, where a loop consuming repeated Exif\x00\x00 headers in Exif data has no upper bound on iterations. An attacker can supply image data with an arbitrarily long...

PT-2026-129114

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new...

Pillow resource management error vulnerability

Versions 11.0.0 through 13.0.0 of Pillow contain a resource management error vulnerability. This vulnerability arises because Exif.load in src/PIL/Image.py repeatedly slices off remaining EXIF data when the data begins with a six-byte Exif header. Additionally, src/PIL/PngImagePlugin.py accepts P...