5197 matches found
PIL-RCE-Ghostscript-CVE-2018-16509
Python PIL/Pillow Remote Shell Command Execution via Ghostscript CVE-2018-16509 Inspired by https://github.com/ysrc/PIL-RCE-By-GhostButt PIL/Pillow RCE via CVE-2017-8291. This docker environment version is using the newer version of Ghostscript v9.23 and newer exploit CVE-2018-16509. Ghostscript ...
scansploit
=SCANSPLOIT= Tool for Injecting Malicious Payloads Into Barcodes Barcodes code128 QRCodes DataMatrix EAN13 Requirements Python3 PyStrich pip3 install pystrich Incase of jpeg error: sudo apt-get install libtiff5-dev zlib1g-dev libfreetype6-dev liblcms2-dev libwebp-dev tcl8.6-dev tk8.6-dev python-t...
-CVE-2022-44268
PNG Image Generator This Python script generates a PNG image filled with a specific color and embeds a file path as metadata using the Pillow library. Running the Script Prerequisites Python install from Python's official website Pillow library pip install pillow Steps 1. Clone the Repository: gi...
PIL-CVE-2017-8291
Python PIL Remote Command Execution Vulnerability GhostButt The PIL Pillow module for processing images in Python is affected by the GhostButt vulnerability CVE-2017-8291 because it calls GhostScript internally, resulting in a remote command execution vulnerability. Vulnerability Summary PIL...
CLIPGuard
CLIPGuard Installation 1. Create Virtual Environment Recommended python -m venv clipguardenv source clipguardenv/bin/activate 2. Install PyTorch CUDA Example pip install torch torchvision --index-url https://download.pytorch.org/whl/cu121 For CPU: pip install torch torchvision 3. Install...
CVE-2026-128066
Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...
CVE-2026-128067
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
CVE-2026-128067: python-pillow Pillow: Pillow is a Python imaging library
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
CVE-2026-128066: python-pillow Pillow: Pillow is a Python imaging library
Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...
Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data
============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...
GHSA-WQGW-9XFH-QF2G Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data
============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...
GHSA-XCVG-W56Q-R89M Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...
Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
============================================================================ ANT-2026-CS7N494P high CWE-787 memory-safety Heap buffer overflow saving TIFF with libtiff when tags override image size Location: src/libImaging/TiffDecode.c:1035 in ImagingLibTiffEncode Commit:...
CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
CVE-2026-128067
The Pillow Python imaging library (versions 2.3.0 through 12.3.0 ) is vulnerable to a heap buffer overflow when saving compressed TIFF images using libtiff . The root cause is that the TiffImagePlugin._save path allows attacker-controlled image geometry tags (such as ImageWidth, ImageLength, or S...
CVE-2026-128067 Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
EUVD-2026-124778
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
CVE-2026-128067
Pillow is a Python imaging library. From 2.3.0 through 12.3.0, Pillow applications that save compressed TIFF images through libtiff can pass attacker-controlled image geometry tags to the encoder while allocating its row buffer from the actual image dimensions. The affected TiffImagePlugin.save...
CVE-2026-128066
The Pillow Python imaging library (versions 1.0 through 12.3.0) is vulnerable to a Memory Denial of Service (DoS) in the ImageFileDirectory_v2.load() function within src/PIL/TiffImagePlugin.py. The root cause is that the library retains a separate bytes object for each out-of-line IFD tag value w...
CVE-2026-128066 Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data
Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...