Lucene search
K

51 matches found

Prion
Prion
added 2022/01/10 2:12 p.m.21 views

Design/Logic Flaw

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.4CVSS7.8AI score0.00137EPSS
Exploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.3 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.00095EPSS
Exploits0References6
Prion
Prion
added 2022/01/10 2:12 p.m.16 views

Design/Logic Flaw

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.4CVSS7.7AI score0.00095EPSS
Exploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.4 views

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS6.8AI score0.00137EPSS
Exploits0References6
OSV
OSV
added 2022/01/10 2:12 p.m.0 views

UBUNTU-CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS6.9AI score0.00137EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.1 views

Pillow 安全漏洞

Pillow is a Python based image processing library. A security vulnerability exists in Pillow before 9.0.0 that stems from pathgetbbox in path.c incorrectly initializing ImagePath...

6.5CVSS6.7AI score0.00095EPSS
Exploits0References15
Debian CVE
Debian CVE
added 2022/01/07 12:0 a.m.33 views

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS7AI score0.00137EPSS
Exploits0
CVE
CVE
added 2022/01/07 12:0 a.m.275 views

CVE-2022-22815

Summary (supported by provided docs): CVE-2022-22815 concerns the Pillow Python imaging library. The issue is in path_getbbox() within path.c where ImagePath.Path is improperly initialized, enabling a buffer over-read/improper initialization that can cause memory access errors or crashes. Connect...

6.5CVSS7.7AI score0.00095EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2022/01/07 12:0 a.m.272 views

CVE-2022-22816

CVE-2022-22816 affects Pillow’s image path handling. The vulnerability is a buffer over-read in path_getbbox() inside path.c during initialization of ImagePath.Path, present in Pillow versions before 9.0.0. The flaw can allow reading memory outside the intended bounds. The issue is mitigated by u...

6.5CVSS7.9AI score0.00137EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2022/01/07 12:0 a.m.67 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.00095EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/01/07 12:0 a.m.30 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS8.2AI score0.00095EPSS
Exploits0
Rows per page
Query Builder