Lucene search
+L

21 matches found

Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•33 views

PT-2026-123469

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/10/20 11:41 p.m.•21 views

SUSE CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.1CVSS6.7AI score0.00573EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/10/20 8:56 p.m.•31 views

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Summary A PPM or PGM file can declare a width of 0, which Pillow accepts, producing an image of size 0, N. Passing that image to ImageMorph.MorphOp.apply makes the native morphology code index a row buffer at outrowwidth - 1, which is outrow-1 when the width is 0. The process crashes. Details The...

8.7CVSS6.8AI score0.00573EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/20 8:56 p.m.•21 views

GHSA-58R4-6RV3-GFH8 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Summary A PPM or PGM file can declare a width of 0, which Pillow accepts, producing an image of size 0, N. Passing that image to ImageMorph.MorphOp.apply makes the native morphology code index a row buffer at outrowwidth - 1, which is outrow-1 when the width is 0. The process crashes. Details The...

8.7CVSS6.8AI score0.00573EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/10/20 8:56 p.m.•16 views

EUVD-2026-104640

Pillow: Out-of-bounds access in imagingmorph on a zero-width image...

8.7CVSS6.5AI score0.00573EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/10/20 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-112397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•18 views

PT-2026-120299

Summary A PPM or PGM file can declare a width of 0, which Pillow accepts, producing an image of size 0, N. Passing that image to ImageMorph.MorphOp.apply makes the native morphology code index a row buffer at outrowwidth - 1, which is outrow-1 when the width is 0. The process crashes. Details The...

8.7CVSS6.8AI score0.00573EPSS
SaveExploits1References6
osv_debian
osv_debian
•added 2026/10/19 10:17 p.m.•20 views

DEBIAN-CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

7.5CVSS6.7AI score0.00573EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2026/10/19 10:17 p.m.•18 views

PYSEC-2026-4329

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

7.5CVSS6.7AI score0.00573EPSS
SaveExploits1References3
PyPA
PyPA
•added 2026/10/19 10:17 p.m.•15 views

PYSEC-2026-4329

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2026/10/19 10:17 p.m.•20 views

CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS0.00573EPSS
SaveExploits1References3
CVE
CVE
•added 2026/10/19 9:17 p.m.•65 views

CVE-2026-112397

The Pillow Python imaging library is vulnerable to an out-of-bounds access in the ImageMorph.MorphOp.apply() function. The root cause is that the native morphology routine indexes outrow[width - 1] without validating geometry, allowing PPM and PGM inputs with a width of zero to trigger an out-of-...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2026/10/19 9:17 p.m.•22 views

CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/10/19 9:17 p.m.•37 views

CVE-2026-112397 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS0.00573EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/10/19 9:17 p.m.•21 views

CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/10/19 9:17 p.m.•18 views

CVE-2026-112397 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/10/19 9:17 p.m.•26 views

CVE-2026-112397 Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.1AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•13 views

Red Hat: CVE-2026-112397: pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

8.7CVSS6.7AI score0.00573EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•15 views

PT-2026-117655

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A flaw exists in the Python imaging library where the ImageMorph.MorphOp.apply function can access memory before a row buffer when processing images with a width of zero. This occurs because the PPM...

9.8CVSS7.3AI score0.01303EPSS
SaveExploits27References101
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•11 views

PT-2026-129101

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

7.5CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder