Pillow subject to DoS via SAMPLESPERPIXEL tag

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0...

DEBIAN-CVE-2022-45199

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

PYSEC-2022-42980

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

CVE-2022-45199

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

PYSEC-2022-42980

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

Code injection

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

CVE-2022-45199

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

Pillow Resource Management Error Vulnerability

Pillow is a Python based image processing library. A security vulnerability exists in Pillow versions prior to 9.3.0 that stems from allowing denial of service via SAMPLESPERPIXEL...

CVE-2022-45199: Uncontrolled Resource Consumption

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

Oracle OIT IX SDK TIFF ExtraSamples Code Execution Vulnerabiity(CVE-2016-3581)

Description While parsing a specially crafted TIFF file, a parser confussion can lead to a heap buffer overflow resulting in out of bounds memory overwrite leading to arbitrary code execution. Tested Versions Oracle Outside In IX sdk 8.5.1 Product URLs...

LibTIFF DoS

The vulnerability in the tifgetimage.c library of the LibTIFF library is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory out-of-bound reading through the use of the “SamplesPerPixel” tag in the TIFF image...

DEBIAN-CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

Out-of-bounds

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

CVE-2015-8665: Improper Restriction of Operations within the Bounds of a Memory Buffer

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

SRC-2016-0023 : Foxit Reader ConvertToPDF TIF SamplesPerPixel Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Updated libtiff package fixes security vulnerabilities

In libtiff, in tifnext.c, a potential out-of-bound write in NeXTDecode triggered by the test case for CVE-2015-1547 maptools bugzilla 2508. In libtiff, in tifgetimage.c, out-of-bound reads in the TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV /...