CVE-2026-112395

The Pillow Python imaging library (versions 8.2.0 through 13.0.0 ) contains an out-of-bounds read vulnerability in its tiled-TIFF decoder . The issue occurs in the _decodeTile function because libtiff may return a tile allocation smaller than the required row stride multiplied by the tile length,...

CVE-2026-112395 Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-co...

ROS-20260910-73-0006

The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

PT-2023-36430

Уязвимость функции unpack trans table в модуле security/apparmor/policy unpack.c модуля безопасности AppArmor ядра операционной системы Linux связана с возможной утечкой памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

SUSE CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

CVE-2009-1216: Undefined Security Weakness

Multiple unspecified vulnerabilities in 1 unlzh.c and 2 unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications SUA; as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before...

CVE-2006-4336: Undefined Security Weakness

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...