Pillow Heif

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-28231 CRITICAL POC PATCH Act Now

Integer overflow in pillow_heif Python library before 1.3.0 leads to out-of-bounds read when processing HEIF images, potentially causing information disclosure or crashes. PoC and patch available.

Denial Of Service Python Information Disclosure Integer Overflow Pillow Heif +1

NVD GitHub

CVSS 3.1

9.1

EPSS

0.1%

CVE-2026-28231

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Integer overflow in pillow_heif Python library before 1.3.0 leads to out-of-bounds read when processing HEIF images, potentially causing information disclosure or crashes. PoC and patch available.

Denial Of Service Python Information Disclosure +3

NVD GitHub