Pillow

Everything Honeypot Daily has reported about Pillow: 2 stories, newest first. Part of our Vulnerabilities coverage.

Can Crafted PSD, MPO, DCX, or MIC Files Trigger Out-of-Bounds Writes in Pillow 11-13?

A critical flaw in Python Pillow versions 11.0.0 up to 13.0.0 allows crafted multi-frame images to trigger out-of-bounds writes and potential remote code execution.

Oct 22, 2026

Vulnerabilities

How does a crafted IPTC image crash Python applications using Pillow?

A high-severity flaw in Pillow allows attackers to crash worker processes via NULL pointer dereference when processing malicious IPTC files.

Oct 21, 2026