Lucene search
+L

35 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/19 12:00 a.m.•4 views

CVE-2021-25291: Out-of-bounds Read

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

7.5CVSS5.8AI score0.01398EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/19 12:00 a.m.•3 views

CVE-2021-25290: Out-of-bounds Write

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

7.5CVSS5.7AI score0.02372EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/03/04 2:59 a.m.•29 views

Denial Of Service (DoS)

pillow is vulnerable to denial of service. A negative-offset memcpy with an invalid size in TiffDecode.c allows an attacker to crash the application via a malicious input...

7.5CVSS4.1AI score0.02372EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
•added 2021/03/03 5:39 p.m.•42 views

CVE-2021-25291

A flaw was found in python-pillow. Invalid tile boundaries could lead to an OOB Read in TiffReadRGBATile in TiffDecode.c. Mitigation Disable the invoice generation feature to mitigate this vulnerability in Red Hat Quay...

7.5CVSS1.9AI score0.01398EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/03/03 5:04 p.m.•44 views

CVE-2021-25290

A flaw was found in python-pillow. In TiffDecode.c, there is a negative-offset memcpy with an invalid size which could lead to a system crash. Mitigation Disable the invoice generation feature to mitigate this vulnerability in Red Hat Quay...

7.5CVSS1.4AI score0.02372EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/03/03 12:00 a.m.•22 views

CVE-2021-252890

In TiffDecode.c, there is a negative-offset memcpy with an invalid size...

5.8AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/03/03 12:00 a.m.•43 views

CVE-2021-25291

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...

7.5CVSS6.8AI score0.01398EPSS
SaveExploits0References3
Prion
Prion
•added 2020/06/25 7:15 p.m.•27 views

Buffer overflow

In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c...

6.8CVSS7.5AI score0.01129EPSS
SaveExploits0References7Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/25 12:00 a.m.•2 views

CVE-2020-10379: Buffer Copy without Checking Size of Input

In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c...

7.8CVSS6.2AI score0.01129EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/01/03 1:15 a.m.•11 views

CVE-2020-5310

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.1AI score0.01975EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/03 12:00 a.m.•1 views

CVE-2020-5310: Integer Overflow or Wraparound

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS7AI score0.01975EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2018/07/24 8:03 p.m.•36 views

Pillow Buffer overflow in ImagingLibTiffDecode

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6.7AI score0.02563EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2016/04/13 4:59 p.m.•34 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6AI score0.02563EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2016/04/13 4:00 p.m.•46 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6.4AI score0.02563EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/13 12:00 a.m.•4 views

CVE-2016-0740: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS7AI score0.02563EPSS
SaveExploits0References2
Rows per page
Query Builder