7 matches found
Astra Linux - vulnerability in pillow
In Pillow’s path.c file, pathgetbbox prior to version 9.0.0 contains a buffer over-read during the initialization of ImagePath.Path...
PYSEC-2026-2251
Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polygon and ImageDraw.ImageDraw.line could cause a heap buffer overflow, as nested lists were recursive...
BIT-PILLOW-2022-22816
pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...
EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2022-1495)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow befor...
ALPINE-CVE-2022-22815
pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
