Lucene search
+L

290 matches found

Snyk
Snyk
added 2026/07/06 8:42 p.m.11 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the FontFile.compile process. An attacker can cause excessive memory allocation by providing a specially crafted font file that triggers uncontrolled resource consumption during image...

8.7CVSS6AI score0.00418EPSS
SaveExploits1References2
OSV
OSV
added 2026/06/03 10:59 a.m.9 views

SUSE-SU-2026:2234-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues - CVE-2026-42308: integer overflow in font processing can lead to denial of service bsc1265359. - CVE-2026-42310: infinite loop and resource exhaustion when processing specially crafted PDFs bsc1265154...

5.5CVSS7.2AI score0.00126EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/06/01 12:00 a.m.18 views

openSUSE 16 Security Update : python-Pillow (openSUSE-SU-2026:20831-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20831-1 advisory. This update for python-Pillow fixes the following issues - CVE-2026-42308: integer overflow in font processing can lead to denial of service...

5.5CVSS6AI score0.00133EPSS
SaveExploits0References9
OSV
OSV
added 2026/05/28 4:02 p.m.17 views

OPENSUSE-SU-2026:20831-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues - CVE-2026-42308: integer overflow in font processing can lead to denial of service bsc1265359. - CVE-2026-42309: heap buffer overflow when processing nested list coordinates bsc1265153. - CVE-2026-42310: infinite loop and resource exhausti...

5.5CVSS7.2AI score0.00133EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
added 2026/05/19 8:23 a.m.21 views

Security update for python-Pillow

This update for python-Pillow fixes the following issue CVE-2026-42308: integer overflow in font processing can lead to denial of service bsc1265359. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

8.7CVSS7.1AI score0.00114EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/19 8:22 a.m.6 views

SUSE-SU-2026:2004-1 Security update for python-Pillow

This update for python-Pillow fixes the following issue - CVE-2026-42308: integer overflow in font processing can lead to denial of service bsc1265359...

5.5CVSS7.2AI score0.00114EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/12 8:54 a.m.8 views

BIT-PILLOW-2026-42308 Pillow: Integer overflow when processing fonts

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/09 4:09 a.m.8 views

CVE-2026-42308 Pillow: Integer overflow when processing fonts

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...

5.1CVSS7.1AI score
SaveExploits0References4
OSV
OSV
added 2026/05/04 8:18 p.m.30 views

GHSA-WJX4-4JCJ-G98J Pillow has an integer overflow when processing fonts

If a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This has been fixed...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/02 6:07 a.m.8 views

CVE-2026-5314

A flaw was found in Nothings stb, specifically within the stbttInitFontinternal function in the stbtruetype.h library. A remote attacker can exploit this vulnerability by performing a manipulation that leads to an out-of-bounds read. This can result in a Denial of Service DoS, making the affected...

8.8CVSS5.7AI score0.00664EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2026/01/26 12:00 a.m.9 views

Canon Printers Multiple Vulnerabilities (CP2026-001)

Multiple vulnerabilities have been identified for certain Canon Small Office Multifunction Printers and Laser Printers. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.8CVSS5.8AI score0.00915EPSS
SaveExploits0References9
CVE
CVE
added 2026/01/15 11:38 p.m.25 views

CVE-2025-14235

Canon Small Office Multifunction Printers and Laser Printers are affected by CVE-2025-14235 due to a buffer overflow in XPS font fpgm data processing. A remote attacker on the network could trigger a crash or arbitrary code execution. Affected firmware: v06.02 and earlier across listed models (Ja...

9.8CVSS7.4AI score0.00845EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 11:24 a.m.13 views

CVE-2021-31013

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...

5.5CVSS5.6AI score0.00797EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-21985

Malware in sbrugna...

7.8CVSS8.1AI score0.01036EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-24076

Malware in sbrugna...

7.8CVSS7.4AI score0.00248EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-16679

Malware in sbrugna...

6.5CVSS7.6AI score0.0644EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-16678

Malware in sbrugna...

6.5CVSS7.6AI score0.0644EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-17748

Malware in sbrugna...

5.5CVSS5.5AI score0.00852EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-20424

Malware in sbrugna...

7.8CVSS6.9AI score0.00994EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2005-0061

Malware in sbrugna...

7.2CVSS6.4AI score0.01724EPSS
SaveExploits0References8
Rows per page
Query Builder