USN-9064-1: Pillow vulnerabilities

It was discovered that Pillow could enter an infinite loop while
determining the frame count of a MIC image. An attacker could
possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and
Ubuntu 22.04 LTS. (CVE-2026-112390)

It was discovered that Pillow's PdfParser.get_value() could recurse
without a limit while reading nested PDF objects. An attacker could
possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS.
(CVE-2026-112391)

It was discovered that Pillow's rank-based filters could dereference
invalid image storage for a zero-size image. An attacker could
possibly use this issue to cause a crash. (CVE-2026-112392)

It was discovered that Pillow had a heap buffer overflow in
_tiffWriteProc when saving compressed TIFF data. An attacker could
possibly use this issue to crash the process or execute arbitrary
code. (CVE-2026-112393)

It was discovered that Pillow's P;2L and P;4L raw decoders could
read past the end of an input buffer. An attacker could possibly
use this issue to disclose heap memory or crash the process.
(CVE-2026-112394)

It was discovered that Pillow's tiled-TIFF decoder could read past
the tile buffer while copying four-byte pixels. An attacker could
possibly use this issue to expose heap data or crash the process.
This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu
24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112395)

It was discovered that Pillow had a heap use-after-free when libtiff
rejects a tag while encoding TIFF data to an in-memory buffer. An
attacker could possibly use this issue to crash the process or
execute arbitrary code. This issue only affected Ubuntu 26.10 and
Ubuntu 26.04 LTS. (CVE-2026-112396)

It was discovered that Pillow's ImageMorph.MorphOp.apply() could
access memory before a row buffer for a zero-width image. An
attacker could possibly use this issue to cause a crash.
(CVE-2026-112397)

It was discovered that Pillow's FlashPix JPEG-tile decoder could
write decoded scanlines beyond the allocated tile buffer. An
attacker could possibly use this issue to corrupt heap memory and
execute arbitrary code. (CVE-2026-112398)

It was discovered that Pillow could allocate an APNG disposal
background at the full canvas size before applying the
decompression-bomb check. An attacker could possibly use this
issue to exhaust memory and cause a denial of service. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS,
and Ubuntu 22.04 LTS. (CVE-2026-112399)

It was discovered that Pillow could retain a rejected GIF frame
size after a decompression-bomb exception. An attacker could
possibly use this issue to exhaust memory and cause a denial of
service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS,
and Ubuntu 24.04 LTS. (CVE-2026-112400)

It was discovered that Pillow performed quadratic copying while
parsing GIF comments. An attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu
26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and
Ubuntu 20.04 LTS. (CVE-2026-112401)

It was discovered that Pillow could double free image memory when
ImagingScaleAffine encounters a selective allocation failure. An
attacker could possibly use this issue to crash the process.
(CVE-2026-112402)

It was discovered that Pillow's JPEG decoder could write a
full-width scanline into a buffer sized for a requested draft
scale. An attacker could possibly use this issue to corrupt heap
memory or execute arbitrary code. (CVE-2026-112403)

It was discovered that Pillow's TIFF tile and RGBA decode paths
could read beyond row data produced by libtiff. An attacker could
possibly use this issue to expose heap data or crash the process.
This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu
24.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-112404)

It was discovered that Pillow's Image.merge() could dereference a
null image8 plane. An attacker could possibly use this issue to
cause a crash. This issue only affected Ubuntu 26.10 and Ubuntu
26.04 LTS. (CVE-2026-112405)

It was discovered that Pillow could enter an infinite loop while
rewriting PDF pages. An attacker could possibly use this issue to
cause a denial of service. This issue only affected Ubuntu 26.10,
Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04
LTS, and Ubuntu 18.04 LTS. (CVE-2026-112406)

It was discovered that Pillow performed quadratic copying when
saving a GIF with a long comment. An attacker could possibly use
this issue to cause a denial of service. This issue only affected
Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04 LTS.
(CVE-2026-112891)

It was discovered that Pillow's MSP RLE decoder could expand a
small file into an unbounded in-memory buffer. An attacker could
possibly use this issue to exhaust memory and cause a denial of
service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS,
Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu
18.04 LTS. (CVE-2026-112892)

It was discovered that Pillow could free an invalid glyph pointer
during FreeType rendering with an active stroker. An attacker could
possibly use this issue to corrupt memory or crash the process.
This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and
Ubuntu 24.04 LTS. (CVE-2026-112893)

It was discovered that Pillow took quadratic time to reserve PDF
object identifiers when saving many frames. An attacker could
possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS.
(CVE-2026-112894)

It was discovered that Pillow could exhaust resources while parsing
an existing PDF during an append operation. An attacker could
possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS.
(CVE-2026-112895)

It was discovered that Pillow's TIFF encoder could read beyond a
ColorMap buffer when retained TIFF metadata has a plane size
inconsistent with BitsPerSample. An attacker could possibly use
this issue to disclose heap memory or crash the process.
(CVE-2026-112896)

It was discovered that Pillow could return uninitialized memory as
pixels when libtiff performs a short decode of JPEG-compressed or
Group 4 fax TIFF data. An attacker could possibly use this issue
to disclose stale heap contents. This issue only affected Ubuntu
26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2026-112897)

It was discovered that Pillow could disclose uninitialized stack
memory when Image.quantize() uses an empty palette. An attacker
could possibly use this issue to obtain stack contents. This issue
only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and Ubuntu 24.04
LTS. (CVE-2026-112898)

It was discovered that Pillow was vulnerable to argument injection
when invoking Ghostscript for EPS input. An attacker could possibly
use this issue to inject Ghostscript arguments and execute
arbitrary commands. (CVE-2026-112900)

It was discovered that Pillow's XBM header parser was vulnerable
to regular-expression denial of service. An attacker could
possibly use this issue to cause a denial of service.
(CVE-2026-112901)

It was discovered that Pillow could export non-contiguous image
data to Arrow arrays. An attacker could possibly use this issue to
disclose uninitialized memory or stale heap contents. This issue
only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-114501)

It was discovered that Pillow could overflow an integer when
tracking glyph positions for very long strings. An attacker could
possibly use this issue to cause logic errors or resource
consumption. This issue only affected Ubuntu 24.04 LTS, Ubuntu
22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS,
and Ubuntu 14.04 LTS. (CVE-2026-42308)

It was discovered that Pillow could hang indefinitely when
processing a malicious PDF with a trailer loop. An attacker could
possibly use this issue to cause a denial of service. This issue
only affected Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04
LTS, and Ubuntu 18.04 LTS. (CVE-2026-42310)

It was discovered that Pillow did not properly apply decompression
bomb checks after seeking to new frames in MPO, DCX, and MIC
images. An attacker could possibly use this issue to bypass the
check and cause memory exhaustion. This issue only affected
Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04
LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS.
(CVE-2026-96636)

It was discovered that Pillow did not properly apply decompression
bomb checks after seeking to new frames in SPIDER images. An
attacker could possibly use this issue to cause memory exhaustion.
This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu
24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS,
and Ubuntu 16.04 LTS. (CVE-2026-96637)

It was discovered that Pillow's BMP RLE decoder could expand a
small file into an unbounded in-memory buffer. An attacker could
possibly use this issue to exhaust memory and cause a denial of
service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS,
and Ubuntu 24.04 LTS. (CVE-2026-96638)

It was discovered that Pillow's multi-frame loaders could retain
a stale ImagingCore allocation. An attacker could possibly use
this issue to cause out-of-bounds writes and crashes. This issue
only affected Ubuntu 26.10 and Ubuntu 26.04 LTS. (CVE-2026-96639)

It was discovered that Pillow did not properly detect cyclic page
tree references in PDF parsing. An attacker could possibly use
this issue to cause a denial of service. This issue only affected
Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS,
Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2026-96640)

It was discovered that Pillow's PILfont text-width accumulation
could overflow due to unchecked negative glyph advances. An
attacker could possibly use this issue to cause logic errors or
resource consumption. (CVE-2026-96641)

It was discovered that Pillow's TarIO initializer accepted a
negative octal member size. An attacker could possibly use this
issue to cause an infinite loop and denial of service.
(CVE-2026-96642)

It was discovered that Pillow's Exif.load() could perform
quadratic CPU work when processing repeated EXIF headers. An
attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 26.10 and Ubuntu 26.04
LTS. (CVE-2026-96643)

It was discovered that Pillow could call jpeg_write_marker() for a
JPEG COM comment when an ICC profile has exactly filled the
65536-byte encoder buffer. An attacker could possibly use this
issue to cause a heap buffer overflow and execute arbitrary code.
This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, and
Ubuntu 24.04 LTS. (CVE-2026-96778)