Vulnerabilities
Pillow FlashPix Heap Corruption Allows Code Execution in Python Apps
A crafted FlashPix file can crash or control Python applications using Pillow versions prior to 13.0.0 by overflowing memory buffers during image decoding.
Pillow
Everything NetSec Observer has reported about Pillow: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Pillow Morphology Zero-Width Image Crash CVE-2026-112397 Patched in v13.0.0
A flaw in Pillow versions prior to 13.0.0 allows zero-width images to trigger memory errors and crashes via morphology operations.
Vulnerabilities
Pillow Image Library Fixes High-Severity Double-Free Memory Flaw
A memory corruption bug in older Pillow versions allows attackers to crash processes by triggering selective allocation failures during image transformations.