2865 matches found
Astra Linux – Vulnerability in pillow
Pillow through 10.1.0 allows for arbitrary code execution via the environment parameter. This is a different vulnerability than CVE-2022-22817, which involved the expression parameter...
ROOT-APP-PYPI-CVE-2026-42311 CVE-2026-42311 in pillow - Patched by Root
Root has patched CVE-2026-42311 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-25990 CVE-2026-25990 in pillow - Patched by Root
Root has patched CVE-2026-25990 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-40192 CVE-2026-40192 in pillow - Patched by Root
Root has patched CVE-2026-40192 in the pillow package for Root:PyPI. Multiple fixed versions available...
RHSA-2026:54528 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image
A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes, getpixel, convert, or save ca...
Pillow: Pillow: Native heap out-of-bounds write
A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation, and ImagingExpand computes output...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
RHSA-2026:54417 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...
Pillow: Pillow: Native heap out-of-bounds write
A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation, and ImagingExpand computes output...
Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image
A flaw was found in Pillow prior to 12.3.0. When an uncompressed McIdas AREA image is loaded from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width. Pixel access such as Image.tobytes, getpixel, convert, or save ca...
ROOT-APP-PYPI-CVE-2026-42309 CVE-2026-42309 in pillow - Patched by Root
Root has patched CVE-2026-42309 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-59203 CVE-2026-59203 in pillow - Patched by Root
Root has patched CVE-2026-59203 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root
Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1786468070 TuxCare security update for pillow (5 CVEs)
TuxCare rebuilt pillow to address 5 CVEs. Fixed in 11.2.1.post3+tuxcare...
RHSA-2026:52551 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...
python-pillow: Pillow: Denial of Service via crafted BDF font file
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...
python-pillow: Pillow: Denial of Service via crafted PCF font data
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...