13 matches found
EUVD-2020-0137
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2021-28676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an...
Medium: python-pillow
Issue Overview: Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. CVE-2020-10177 Affected Packages: python-pillow Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras...
Medium: python-pillow
Issue Overview: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service crash via a crafted FLI file. CVE-2016-0775 Affected Packages: python-pillow Note: This advisory is applicable to Amazon Linux 2 A...
SUSE CVE-2020-10177
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c...
DEBIAN-CVE-2021-28676
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...
ALPINE-CVE-2021-28676
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...
CVE-2021-28676
An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...
PYSEC-2020-76
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c...
GHSA-HJ69-C76V-86WR Out-of-bounds Read in Pillow
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...
ALPINE-CVE-2020-5313
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...
PYSEC-2020-84
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...
Pillow FLI Buffer Overflow Vulnerability
Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/FliDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...