Lucene search
K

89 matches found

PyPA
PyPA
added 2021/07/13 5:15 p.m.4 views

PYSEC-2021-331

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS7.4AI score0.00337EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2021/07/13 12:0 a.m.356 views

CVE-2021-34552

Pillow (Python Imaging Library) vulnerability CVE-2021-34552: Buffer overflow in Convert.c when passing controlled parameters to convert(), affecting Pillow <= 8.2.0 and PIL

9.8CVSS9.6AI score0.00337EPSS
Exploits1References6Affected Software1
AlpineLinux
AlpineLinux
added 2021/07/13 12:0 a.m.57 views

CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

9.8CVSS9.9AI score0.00337EPSS
Exploits1
CNVD
CNVD
added 2021/06/03 12:0 a.m.9 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-43529)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. An out-of-bounds read vulnerability exists in the j2kugrayi function in J2kDecode in versions of Pillow prior...

9.1CVSS6.5AI score0.00267EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/03 12:0 a.m.8 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-43528)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. An out-of-bounds read vulnerability exists in the j2kugrayala function in J2kDecode in versions of Pillow pri...

9.1CVSS6.5AI score0.00343EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.8 views

Pillow Denial of Service Vulnerability (CNVD-2021-14762)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

7.5CVSS6.5AI score0.00425EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.13 views

Pillow Denial of Service Vulnerability (CNVD-2021-14763)

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

7.5CVSS6.5AI score0.00315EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2021/01/11 12:0 a.m.59 views

Pillow: Multiple vulnerabilities

Background Python Imaging Library fork Description Multiple vulnerabilities have been discovered in Pillow. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time...

8.8CVSS3.6AI score0.00293EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/03/18 4:51 p.m.54 views

Important: Red Hat Security Advisory: python-imaging security update

An update for python-imaging is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS6.8AI score0.01753EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/02/24 12:0 a.m.33 views

Debian DSA-4631-1 : pillow - security update

Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed PCX, FLI, SGI or TIFF images are processed. C Tenable Network Security, Inc. The descriptive text and package checks i...

9.8CVSS6.6AI score0.03942EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2018/07/24 8:15 p.m.26 views

Pillow buffer overflow in ImagingPcdDecode

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

6.5CVSS6.5AI score0.02207EPSS
Exploits0References13Affected Software1
OSV
OSV
added 2018/07/24 8:15 p.m.20 views

GHSA-3C5C-7235-994J Pillow buffer overflow in ImagingPcdDecode

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

7.1CVSS5.9AI score0.02207EPSS
Exploits0References14
Ubuntu
Ubuntu
added 2017/03/13 4:58 p.m.69 views

USN-3229-1: Python Imaging Library vulnerabilities

It was discovered that the Python Imaging Library incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause the Python Imaging Library to crash, resulting in a denial of service. CVE-2014-9601 Cris Neckar discovered that the Python...

7.8CVSS7.1AI score0.01034EPSS
Exploits0
Ubuntu
Ubuntu
added 2016/09/15 2:26 p.m.63 views

USN-3080-1: Python Imaging Library vulnerabilities

Eric Soroos discovered that the Python Imaging Library incorrectly handled certain malformed FLI or PhotoCD files. A remote attacker could use this issue to cause Python Imaging Library to crash, resulting in a denial of service. CVE-2016-0775, CVE-2016-2533 Andrew Drake discovered that the Pytho...

6.5CVSS6.8AI score0.02207EPSS
Exploits0
CNVD
CNVD
added 2016/04/15 12:0 a.m.1 views

Pillow and Python Imaging Library Buffer Overflow Vulnerability

Python Image Library PIL is a Python image processing library developed by Swiss software developer Fredrik Lundh. Pillow is a compiled version of PIL with some bug fixes developed by American software developer Alex Clark. A buffer overflow vulnerability exists in the ImagingPcdDecode function i...

6.5CVSS7.1AI score0.02207EPSS
Exploits0References1
OSV
OSV
added 2016/04/13 4:59 p.m.2 views

DEBIAN-CVE-2016-2533

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

6.5CVSS6.3AI score0.02207EPSS
Exploits0References1
OSV
OSV
added 2016/04/13 4:59 p.m.4 views

CVE-2016-2533

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

6.5CVSS6.4AI score
Exploits0References9
PyPA
PyPA
added 2016/04/13 4:59 p.m.4 views

PYSEC-2016-19

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

6.5CVSS7AI score0.02207EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2016/04/13 4:59 p.m.1 views

PYSEC-2016-19

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

6.5CVSS6.9AI score0.02207EPSS
Exploits0References10
Prion
Prion
added 2016/04/13 4:59 p.m.19 views

Buffer overflow

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

4.3CVSS7.1AI score0.02207EPSS
Exploits0References9Affected Software3
Rows per page
Query Builder