Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
•added 2026/08/04 6:56 p.m.•22 views

python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...

7.5CVSS7.3AI score0.00418EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2026/08/04 4:04 p.m.•17 views

python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...

7.5CVSS7.3AI score0.00418EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2026/07/31 4:00 p.m.•17 views

python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...

7.5CVSS7.3AI score0.00418EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•18 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gd (UTSA-2026-016717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016717 advisory. gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is The GD2 image format is a proprietary...

7.5CVSS6.5AI score0.02134EPSS
SaveExploits1References4
OSV
OSV
•added 2021/08/26 1:15 a.m.•14 views

AZL-6432 CVE-2021-40145 affecting package gd for versions less than 2.3.0-5

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

7.5CVSS6.5AI score0.02134EPSS
SaveExploits1References1
Rows per page
Query Builder