872270 matches found
pillow: pillow: Denial of service via crafted PDF during append operations
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...
pillow: pillow: Denial of Service via infinite loop during PDF page rewriting
A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS through an infinite loop during PDF page processing. When rewriting pages, the parser fails to detect circular references in the page tree hierarchy. By submitting a specially crafted PDF...
pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images
A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image with a width of zero to an application performing morphology operations. Because Pillow fails to validate zero-width image geometry during these operations, it attempts an...
pillow: pillow: Denial of service via double free during image transformation
A flaw was found in Pillow. A remote attacker who can submit large image transformation operations under memory pressure can trigger improper error handling, leading to a double-free vulnerability releasing the same memory block twice. This issue can result in an application crash, causing a Deni...
pillow: pillow: Denial of Service via crafted multi-frame image conversion
A flaw was found in Pillow. When converting multi-frame images into a multi-page PDF document, the library repeatedly scans previously assigned object identifiers, resulting in quadratic processing time. A remote attacker could exploit this vulnerability by supplying a crafted image with a large...
pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder
A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted Microsoft Paint MSP image file to an application that processes image pixels. Due to missing expansion limits during decompression, the run-length encoding RLE decoder expands image da...
CGA-965X-J2J6-4QF3
Bulletin has no description...
CGA-WXJW-5HWX-6C73
Bulletin has no description...
CGA-8PXQ-H632-GWV8
Bulletin has no description...
CGA-GJ6J-97FM-F89J
Bulletin has no description...
ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing
A flaw was found in the ip-address library. A remote attacker can exploit this vulnerability by supplying an excessively large IPv6 address string to an application that parses input without length limits. The parser attempts to process the unbounded input and generate disproportionately large...
brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns
A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial ...
brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...
brace-expansion: brace-expansion: Denial of Service via crafted brace patterns
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...
CGA-7VR8-CR2M-HHW3
Bulletin has no description...
CGA-QQ2F-H4QF-RCQM
Bulletin has no description...
CGA-XMC9-H8R7-J9FJ
Bulletin has no description...
CGA-X8RW-75XV-JVX9
Bulletin has no description...