EulerOS Virtualization 2.12.1 : python-pillow (EulerOS-SA-2026-3611)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2026-3762)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2026-3715)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...

Linux Distros Unpatched Vulnerability : CVE-2026-59200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode in PIL/PdfParser.py calls zlib.decompress with bufsize set to the PDF...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the decode function of PdfStream in PdfParser, where zlib decompression is performed without limiting the output size. An attacker can cause excessive memory consumption by...

CVE-2026-59200

Summary: Pillow 5.1.0–12.3.0 contains a memory exhaustion vulnerability in PdfParser.PdfStream.decode() caused by calling zlib.decompress() with an unbounded output size (bufsize set to the PDF stream Length). This can allow a crafted FlateDecode PDF stream to exhaust memory on a small file. Affe...

EUVD-2017-15898

Malware in sbrugna...

EUVD-2015-8835

Malware in sbrugna...

EUVD-2017-17335

Malware in sbrugna...

EUVD-2018-18110

Malware in sbrugna...

EUVD-2018-3170

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-5853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file. CVE-2017-5853 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-5855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereferenc...

Linux Distros Unpatched Vulnerability : CVE-2017-6844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a...

SUSE CVE-2017-5855

The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

SUSE CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

SUSE CVE-2017-8378

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors related to moffsets.size...

SUSE CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Impact The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be appended to another. Patches It has been patched in 2.6.0 for muhammara and not at all for hummus Workarounds Do not process...

Denial Of Service (DoS)

muhammara and hummas are vulnerable to denial of service. The vulnerability exists in the PDFParser::ParseLastXrefPosition function of PDFParser.cpp, allowing an attacker to cause an application crash through a maliciously crafted PDF file...