Lucene search
+L

66 matches found

Mend
Mend
•added 2025/09/22 12:00 a.m.•9 views

CVE-2025-59801

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked...

5.1CVSS5.9AI score0.002EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/22 12:00 a.m.•64 views

CVE-2025-59801

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked...

4.3CVSS0.002EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/22 12:00 a.m.•7 views

CVE-2025-59801

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked...

4.3CVSS5.9AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•21 views

Artifex GhostXPS security vulnerabilities

Artifex GhostXPS is an open source document processing engine from Artifex USA. A security vulnerability exists in Artifex GhostXPS versions prior to 10.06.0, which stems from a failure to check the samplesperpixel value and could result in a stack-based buffer overflow...

4.3CVSS5.7AI score0.002EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•10 views

CVE-2025-59801: Stack-based Buffer Overflow

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked...

4.3CVSS5.9AI score0.002EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/09/22 12:00 a.m.•39 views

CVE-2025-59801

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked...

4.3CVSS5.9AI score0.002EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 10:45 p.m.•10 views

CVE-2022-45199

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

7.5CVSS7.5AI score0.01212EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/06/07 12:00 a.m.•25 views

EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2023-2101)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow...

7.5CVSS6.9AI score0.01303EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/06/07 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-2101)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01303EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/05/16 12:00 a.m.•27 views

EulerOS Virtualization 2.10.0 : python-pillow (EulerOS-SA-2023-1928)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow...

7.5CVSS6.9AI score0.01303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/04/27 12:00 a.m.•45 views

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2023-1647)

According to the versions of the python-pillow packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow...

7.5CVSS6.9AI score0.01303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/03/07 12:00 a.m.•37 views

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2023-1415)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/03/07 12:00 a.m.•40 views

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2023-1435)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01303EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/03/07 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1415)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01303EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:11 a.m.•7 views

SUSE CVE-2015-8665

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

3.3CVSS8.6AI score0.02857EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 3:22 a.m.•10 views

SUSE CVE-2022-45199

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL...

7.5CVSS6.8AI score0.01212EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/02/10 12:00 a.m.•37 views

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1369)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01303EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/02/10 12:00 a.m.•38 views

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1397)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01303EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2022/11/25 11:05 a.m.•14 views

OESA-2022-2113 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.CVE-2022-45199...

7.5CVSS8.8AI score0.01212EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/11/14 12:00 p.m.•35 views

GHSA-Q4MP-JVH2-76FJ Pillow subject to DoS via SAMPLESPERPIXEL tag

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0...

8.7CVSS7.2AI score0.01212EPSS
SaveExploits0References8
Rows per page
Query Builder