Lucene search
+L

686 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-18119 Malicious code in dds-ddw_spa_libs_primeng (npm)

The package dds-ddwspalibsprimeng was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in dds-ddw_spa_libs_primeng (npm)

The package dds-ddwspalibsprimeng was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/04 3:15 p.m.•16 views

CVE-2025-30098

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

6.7CVSS6AI score0.00439EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/03 1:07 p.m.•19 views

CVE-2025-48379

A flaw was found in python-pillow. The Pillow library exhibits a heap buffer overflow when writing DDS images larger than 64KB, resulting from a missing bounds check during buffer allocation. This flaw allows a local attacker to trigger the overflow by providing a maliciously crafted DDS image...

7.1CVSS7AI score0.00319EPSS
SaveExploits1References7
Veracode
Veracode
•added 2025/07/03 6:04 a.m.•12 views

Heap Based Buffer Overflow

Pillow is vulnerable to heap-based buffer overflow.. The vulnerability is due to writing into a buffer without checking for available space when saving a large 64k image in DDS format, which allows an attacker to trigger a heap buffer overflow by tricking the application into processing malicious...

7.1CVSS6.5AI score0.00319EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2025/07/03 5:57 a.m.•6 views

BIT-PILLOW-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS7.6AI score0.00319EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/07/03 12:00 a.m.•17 views

Python Library Pillow 11.2.x < 11.3.0 Write Buffer Overflow

The detected version of the Pillow Python package, Pillow, is 11.2.x prior to 11.3.0. It is, therefore, affected by a write buffer overflow vulnerability. There is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing int...

7.1CVSS7.1AI score0.00319EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/07/02 11:21 p.m.•16 views

SUSE CVE-2025-48379

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.8CVSS7.3AI score0.00319EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/02 5:32 p.m.•6 views

Malicious code in dds-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d47ebdc1891b1fd02986098c63e73de75cf01ce8c67fc24f74ec39c86a04e866 The OpenSSF Package Analysis project identified 'dds-js' @ 2.4.0 npm ...

7.1AI score
SaveExploits0
NVD
NVD
•added 2025/07/01 7:15 p.m.•18 views

CVE-2025-48379

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS0.00319EPSS
SaveExploits1References4
PyPA
PyPA
•added 2025/07/01 7:15 p.m.•28 views

PYSEC-2025-61

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS7.3AI score0.00319EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/07/01 7:15 p.m.•11 views

PYSEC-2025-61

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS7.6AI score0.00319EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/07/01 6:33 p.m.•6 views

CVE-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS7.7AI score0.00319EPSS
SaveExploits1References4
OSV
OSV
•added 2025/07/01 6:33 p.m.•9 views

CVE-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS7AI score
SaveExploits0References6
CVE
CVE
•added 2025/07/01 6:33 p.m.•182 views

CVE-2025-48379

CVE-2025-48379 (Pillow) Vulnerability: Pillow (Python imaging library) versions 11.2.0 through before 11.3.0 contain a heap buffer overflow when saving large (&gt;64k) images in DDS format, caused by writing into a buffer without checking available space. The issue affects users who save untruste...

7.1CVSS7.7AI score0.00319EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/07/01 6:33 p.m.•17 views

CVE-2025-48379 Pillow Vulnerable to Write Buffer Overflow on BCn encoding

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS0.00319EPSS
SaveExploits1References4
OSV
OSV
•added 2025/07/01 5:29 p.m.•12 views

GHSA-XG8H-J46F-W952 Pillow vulnerability can cause write buffer overflow on BCn encoding

There is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. Unclear how large the potential...

7.1CVSS6.5AI score0.00319EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2025/07/01 5:29 p.m.•16 views

Pillow vulnerability can cause write buffer overflow on BCn encoding

There is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. Unclear how large the potential...

7.1CVSS7.6AI score0.00319EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2025/07/01 12:00 a.m.•12 views

PT-2025-27574

Name of the Vulnerable Software and Affected Versions: Pillow versions 11.2.0 through 11.2.x Description: The issue is a heap buffer overflow that occurs when writing a sufficiently large image in the DDS format. This happens because the library writes into a buffer without checking for available...

7.1CVSS7.5AI score0.00319EPSS
SaveExploits1References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/01 12:00 a.m.•1 views

CVE-2025-48379: Heap-based Buffer Overflow

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large 64k encoded with default settings image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save...

7.1CVSS6AI score0.00319EPSS
SaveExploits1References1
Rows per page
Query Builder