123 matches found
PT-2026-120293
Summary Pillow's libImaging decodeTile decoder, used to decode tiled TIFF images, allocates a per-tile buffer using reallocstate-buffer, TIFFTileSizetiff. After each TIFFReadTile it then iterates tile y from 0 up to current tile length and calls the configured row unpacker here copy4 with the...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via ImagingExpand in src/libImaging/Filter.c when processing a zero-dimension image through RankFilter or related filters. An attacker can supply an image with a width or height of zero, triggering undefined...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via tiffWriteProc in src/libImaging/TiffDecode.c when saving a TIFF image to a BytesIO object. The buffer size calculation uses state-size instead of the current write location state-loc when determining wheth...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the JPEG decoder in src/libImaging/JpegDecode.c when processing a JPEG stream whose declared output width or component count exceeds the dimensions used to size the scanline buffer. Because the buffer is...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the FlashPix JPEG tile decoding spanning src/PIL/FpxImagePlugin.py and src/libImaging/JpegDecode.c, where the tile buffer is sized from the rawmode that the MODES table selects from the FPX color IDs, while...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ImagingMerge function in src/libImaging/Bands.c when merging image32 4-bytes-per-pixel, single-band images. The function fails to reject bands whose pixelsize is 4, allowing an attacker to trigger a cras...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via ImagingScaleAffine in src/libImaging/Geometry.c, which deletes a caller-owned output image when its lookup-table allocation fails. When resize calls ImagingTransform and the internal affine transform encounters a memo...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090127)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090127 advisory. Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. Tenable has extracted the preceding description block directly from the Unity Linux...
EUVD-2020-0129
Malware in sbrugna...
EUVD-2020-0131
Malware in sbrugna...
EUVD-2020-0130
Malware in sbrugna...
EUVD-2020-0135
Malware in sbrugna...
EUVD-2022-0201
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-10177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. CVE-2020-10177 Note that Nessus relies on the presence of the package as reporte...
BIT-PILLOW-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffer...
BIT-PILLOW-2020-10379
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c...
BIT-PILLOW-2020-10994
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...
BIT-PILLOW-2020-5310
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...
Rocky Linux 8 : python-pillow (RLSA-2020:3185)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:3185 advisory. - In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than...
