PT-2021-27524

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. Technical details include a crash type of Stack-buffer-overflow READ 2, and the crash state...

PT-2021-28208

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5MM memcpy function, H5O attr decode function, and H5O attr shared decode function...

PT-2021-27527

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decode pkcs12 auth safe function, which is called by gnutls pkcs12 get bag and gnutls...

PT-2021-28190

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5O sdspace decode function, which is called by H5O sdspace shared decode and H5O attr decode. Recommendations: A...

PT-2021-27422

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the opj dwt decode partial tile function, opj tcd dwt decode function, and opj tcd decode til...

PT-2021-27416

Name of the Vulnerable Software and Affected Versions: OpenJPEG affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which can cause a crash. The crash occurs in the opj tcd mct decode function, specifically when decoding tiles in the opj tcd decode ti...

PT-2021-27434

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the function names opj mct decode real, opj tcd mct...

PT-2021-27646

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the function names H5MM strdup, H5O attr shared decode, and H5O msg iterate real. Recommendations...

PT-2021-27944

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5O cont decode function, which is called by H5O chunk deserialize and H5O cache deserialize. Recommendations At th...

PT-2021-27526

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the decode complex string function, which is called by...

PT-2021-27518

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: A heap buffer overflow issue was identified in the rawspeed library, specifically in the VC5Decompressor component. The crash occurs during the decoding process, involving the decode...

PT-2021-27852

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5O dtype decode helper function, which is called by H5O dtype decode and H5O dtype shared decode. Recommendations ...

PT-2021-27620

Name of the Vulnerable Software and Affected Versions: aom affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the read uncompressed header function, av1 decode frame headers and setup, and aom decode frame fr...

PT-2021-27479

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions read bits 16, decode number, and do uncompress block. No...

PT-2021-27627

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions read bits 16, decode number, and parse tables. No information is...

UBUNTU-CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

UBUNTU-CVE-2020-35654

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

PYSEC-2021-70

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

Pillow Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability in versions of Pillow prior to 8.1.0 causes a heap-based buffer overflow in TiffDecode when decoding specially crafted YCbCr files due to certain interpretations conflicting with LibTIFF in RGBA mode. An attacker...