[CVE-2026-96636 ] Published: Oct 21, 2026, 9:05:20 PM UTC
pillow: CVE-2026-96636
Medium(6.5) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
[CVE-2026-112390 ] Published: Oct 19, 2026, 8:35:39 PM UTC
Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImag
High(8.2) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-1.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-1.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-1.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 13.0.0-1.1
Version impact unknown
pypi · python-Pillow · opensuse · tumbleweed
[CVE-2026-54058 ] Published: Jul 14, 2026, 4:27:38 PM UTC
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row
Critical(9.1) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.8.1, 12.3.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.8.1, 12.3.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.8.1, 12.3.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.8.1, 12.3.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
[CVE-2026-42311 ] Published: May 4, 2026, 8:20:31 PM UTC
Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code ex
High(8.6) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.6.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.6.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.6.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.6.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0
[CVE-2026-40192 ] Published: Apr 13, 2026, 7:22:35 PM UTC
Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attack
High(8.7) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.4.1, 12.2.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.4.1, 12.2.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.4.1, 12.2.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.4.1, 12.2.0-2.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
[CVE-2026-25990 ] Published: Feb 11, 2026, 2:22:50 PM UTC
pillow: CVE-2026-25990
High(8.6) Sconosciuto Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.3.1, 12.1.1-1.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.3.1, 12.1.1-1.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.3.1, 12.1.1-1.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-160000.3.1, 12.1.1-1.1
Version impact unknown
pypi · python-Pillow · opensuse · leap 16.0; pypi · python-Pillow · opensuse · tumbleweed
[CVE-2025-48379 ] Published: Jul 1, 2025, 5:29:37 PM UTC
pillow: CVE-2025-48379
High(7.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 1:30:34 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.3.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
[CVE-2023-44271 ] Published: Jun 30, 2023, 12:00:00 AM UTC
pillow: CVE-2023-44271
High(7.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 5:45:08 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.0.1-2.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.0.1-2.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.0.1-2.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.0.1-2.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
[CVE-2023-50447 ] Published: Jan 1, 2023, 12:00:00 AM UTC
pillow: CVE-2023-50447
High(8.4) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 5:52:42 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.2.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.2.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.2.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.2.0-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
[CVE-2022-30595 ] Published: May 17, 2022, 12:00:00 AM UTC
pillow: CVE-2022-30595
Critical(9.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 6:15:46 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 9.1.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 9.1.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 9.1.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 9.1.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
[CVE-2022-22817 ] Published: Jan 2, 2022, 12:00:00 AM UTC
pillow: CVE-2022-22817
Critical(9.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 6:16:58 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.1.0-1.1, 9.0.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.1.0-1.1, 9.0.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.1.0-1.1, 9.0.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 11.1.0-1.1, 9.0.1-1.1
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
[CVE-2014-3589 ] Published: Aug 13, 2014, 12:00:00 AM UTC
pillow: CVE-2014-3589
Medium Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:10:43 PM UTC
Dettagli (4) 12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.3.0-1.1, 12.3.0-1.1, 3.1.1-4.1, 3.4.2-1.1, 8.3.2-1.2
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.3.0-1.1, 12.3.0-1.1, 3.1.1-4.1, 3.4.2-1.1, 8.3.2-1.2
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.3.0-1.1, 12.3.0-1.1, 3.1.1-4.1, 3.4.2-1.1, 8.3.2-1.2
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
12.3.0-2.2 · x86_64 · tumbleweed
Sconosciuto · Corretta: 10.3.0-1.1, 12.3.0-1.1, 3.1.1-4.1, 3.4.2-1.1, 8.3.2-1.2
Version impact unknown
dsa · python-Pillow · opensuse · tumbleweed
