PIL-RCE-Ghostscript-CVE-2018-16509

Python PIL/Pillow Remote Shell Command Execution via Ghostscript CVE-2018-16509 Inspired by https://github.com/ysrc/PIL-RCE-By-GhostButt PIL/Pillow RCE via CVE-2017-8291. This docker environment version is using the newer version of Ghostscript v9.23 and newer exploit CVE-2018-16509. Ghostscript ...

PIL-CVE-2017-8291

Python PIL Remote Command Execution Vulnerability GhostButt The PIL Pillow module for processing images in Python is affected by the GhostButt vulnerability CVE-2017-8291 because it calls GhostScript internally, resulting in a remote command execution vulnerability. Vulnerability Summary PIL...

vLLM 0.8.3 < 0.14.1 Information Disclosure (GHSA-4r2x-xpjr-7cvv)

The version of the vLLM Python package installed on the remote host is 0.8.3 prior to 0.14.1. It is, therefore, affected by an information disclosure vulnerability. When an invalid image is sent to the vLLM multimodal endpoint, PIL throws an error that vLLM returns to the client, leaking a heap...

The vulnerability of the bdf_char() function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the bdfchar function in the PIL/BdfFontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the GdImageFile._open() function in the PIL/GdImageFile.py library for working with images in the Python Pillow library allows a attacker to cause a service denial.

The vulnerability of the GdImageFile.open function in the PIL/GdImageFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the _load_bitmaps() function of the PIL/PcfFontFile.py file from the Pillow image processing library allows a attacker to cause a denial-of-service attack.

The vulnerability of the loadbitmaps function in the PIL/PcfFontFile.py file from the Python Pillow image processing library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `FontFile.compile()` function in the PIL/FontFile.py library for working with images in the Python Pillow library allows a attacker to cause a service failure.

The vulnerability of the FontFile.compile function in the PIL/FontFile.py library for working with images in the Python Pillow library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 White Hat School 3rd term, Class 13, Baek Seung-hoon @shun1403 https://github.com/shun1403/PIL-CVE-2017-8291.git Environment: Ubuntu Linux Environment Setup Upgrade to V2 via sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin If...

PIL-RCE-By-GhostButt

Эксплуатация уязвимости выполнения команд в модуле Python PIL Атака на Python-приложения, разработанные с использованием PIL, с целью достижения удалённого выполнения команд. Этот проект предназначен для размещения исходного кода и Dockerfile, используемых в статье и экспериментах. Paper :...

CVE-2026-59203: Loop with Unreachable Exit Condition

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via the Anthropic API routerResearcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security ResearchSeverity: CVSS 3.1 5.3 Medium AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NTarget: https://github.com/vllm-project/vllm---...

[SECURITY] Fedora 44 Update: python-pillow-12.3.0-1.fc44

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

CVE-2026-55379: Memory Allocation with Excessive Size Value

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdfchar read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new without calling Image.decompressionbombcheck, bypassing Pillow's documented decompression bomb protection...

CVE-2026-54060: Memory Allocation with Excessive Size Value

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per-glyph images into a combined bitmap with Image.new"1", xsize, ysize without calling Image.decompressionbombcheck, allowing a font to trigger excessive allocation during conversion or saving. This...

CVE-2026-54059: Memory Allocation with Excessive Size Value

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py loadbitmaps read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes without calling Image.decompressionbombcheck, allowing crafted PCF font data to cause excessive memory allocation. Thi...

CVE-2026-54236 vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitizemessage helper that strips object-repr memory addresses from error messages before they reach the client, is incomplete: several response paths echo...

CVE-2026-54236 vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitizemessage helper that strips object-repr memory addresses from error messages before they reach the client, is incomplete: several response paths echo...

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via the Anthropic API router Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Severity: CVSS 3.1 5.3 Medium AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Target: https://github.com/vllm-project/vllm ---...

CVE-2026-10801

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template.savepilimage of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A hig...

GHSA-VQWP-45WM-R9R5 Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a...