USN-9064-1: Pillow vulnerabilities

It was discovered that Pillow could enter an infinite loop while determining the frame count of a MIC image. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112390)

It was discovered that Pillow's PdfParser.get_value() could recurse without a limit while reading nested PDF objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-112391)

It was discovered that Pillow's rank-based filters could dereference invalid image storage for a zero-size image. An attacker could possibly use this issue to cause a crash. (CVE-2026-112392)

It was discovered that Pillow had a heap buffer overflow in _tiffWriteProc when saving compressed TIFF data. An attacker could possibly use this issue to crash the process or execute arbitrary code. (CVE-2026-112393)

It was discovered that Pillow's P;2L and P;4L raw decoders could read past the end of an input buffer. An attacker could possibly use this issue to disclose heap memory or crash the process. (CVE-2026-112394)

It was discovered that Pillow's tiled-TIFF decoder could read past the tile buffer while copying four-byte pixels. An attacker could possibly use this issue to expose heap data or crash the process. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112395)

It was discovered that Pillow had a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. An attacker could possibly use this issue to crash the process or execute arbitrary code. This issue only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-112396)

It was discovered that Pillow's ImageMorph.MorphOp.apply() could access memory before a row buffer for a zero-width image. An attacker could possibly use this issue to cause a crash. (CVE-2026-112397)

It was discovered that Pillow's FlashPix JPEG-tile decoder could write decoded scanlines beyond the allocated tile buffer. An attacker could possibly use this issue to corrupt heap memory and execute arbitrary code. (CVE-2026-112398)

It was discovered that Pillow could allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. An attacker could possibly use this issue to exhaust memory and cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112399)

It was discovered that Pillow could retain a rejected GIF frame size after a decompression-bomb exception. An attacker could possibly use this issue to exhaust memory and cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-112400)

It was discovered that Pillow performed quadratic copying while parsing GIF comments. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-112401)

It was discovered that Pillow could double free image memory when ImagingScaleAffine encounters a selective allocation failure. An attacker could possibly use this issue to crash the process. (CVE-2026-112402)

It was discovered that Pillow's JPEG decoder could write a full-width scanline into a buffer sized for a requested draft scale. An attacker could possibly use this issue to corrupt heap memory or execute arbitrary code. (CVE-2026-112403)

It was discovered that Pillow's TIFF tile and RGBA decode paths could read beyond row data produced by libtiff. An attacker could possibly use this issue to expose heap data or crash the process. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112404)

It was discovered that Pillow's Image.merge() could dereference a null image8 plane. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-112405)

It was discovered that Pillow could enter an infinite loop while rewriting PDF pages. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-112406)

It was discovered that Pillow performed quadratic copying when saving a GIF with a long comment. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-112891)

It was discovered that Pillow's MSP RLE decoder could expand a small file into an unbounded in-memory buffer. An attacker could possibly use this issue to exhaust memory and cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-112892)

It was discovered that Pillow could free an invalid glyph pointer during FreeType rendering with an active stroker. An attacker could possibly use this issue to corrupt memory or crash the process. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-112893)

It was discovered that Pillow took quadratic time to reserve PDF object identifiers when saving many frames. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-112894)

It was discovered that Pillow could exhaust resources while parsing an existing PDF during an append operation. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-112895)

It was discovered that Pillow's TIFF encoder could read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. An attacker could possibly use this issue to disclose heap memory or crash the process. (CVE-2026-112896)

It was discovered that Pillow could return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. An attacker could possibly use this issue to disclose stale heap contents. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112897)

It was discovered that Pillow could disclose uninitialized stack memory when Image.quantize() uses an empty palette. An attacker could possibly use this issue to obtain stack contents. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-112898)

It was discovered that Pillow was vulnerable to argument injection when invoking Ghostscript for EPS input. An attacker could possibly use this issue to inject Ghostscript arguments and execute arbitrary commands. (CVE-2026-112900)

It was discovered that Pillow's XBM header parser was vulnerable to regular-expression denial of service. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-112901)

It was discovered that Pillow could export non-contiguous image data to Arrow arrays. An attacker could possibly use this issue to disclose uninitialized memory or stale heap contents. This issue only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-114501)

It was discovered that Pillow could overflow an integer when tracking glyph positions for very long strings. An attacker could possibly use this issue to cause logic errors or resource consumption. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. (CVE-2026-42308)

It was discovered that Pillow could hang indefinitely when processing a malicious PDF with a trailer loop. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-42310)

It was discovered that Pillow did not properly apply decompression bomb checks after seeking to new frames in MPO, DCX, and MIC images. An attacker could possibly use this issue to bypass the check and cause memory exhaustion. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2026-96636)

It was discovered that Pillow did not properly apply decompression bomb checks after seeking to new frames in SPIDER images. An attacker could possibly use this issue to cause memory exhaustion. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2026-96637)

It was discovered that Pillow's BMP RLE decoder could expand a small file into an unbounded in-memory buffer. An attacker could possibly use this issue to exhaust memory and cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-96638)

It was discovered that Pillow's multi-frame loaders could retain a stale ImagingCore allocation. An attacker could possibly use this issue to cause out-of-bounds writes and crashes. This issue only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-96639)

It was discovered that Pillow did not properly detect cyclic page tree references in PDF parsing. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-96640)

It was discovered that Pillow's PILfont text-width accumulation could overflow due to unchecked negative glyph advances. An attacker could possibly use this issue to cause logic errors or resource consumption. (CVE-2026-96641)

It was discovered that Pillow's TarIO initializer accepted a negative octal member size. An attacker could possibly use this issue to cause an infinite loop and denial of service. (CVE-2026-96642)

It was discovered that Pillow's Exif.load() could perform quadratic CPU work when processing repeated EXIF headers. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-96643)

It was discovered that Pillow could call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. An attacker could possibly use this issue to cause a heap buffer overflow and execute arbitrary code. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-96778)