4 matches found
CVE-2026-112394
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...
CVE-2026-112394
The Pillow Python imaging library (versions prior to 13.0.0 ) contains a buffer over-read vulnerability in the P;2L and P;4L raw decoders. The root cause is that ImagingRawDecode calculates a packed-pixel row size while unpackers read separately padded bit planes; a caller can provide image dimen...
CVE-2026-112394 Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...
EUVD-2026-104604
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...