turbo-intruder

Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...

BIT-PILLOW-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

Callisto

Callisto An Intelligent Automated Binary Vulnerability Analysis Tool Demo: Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities ...

SUSE CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

EUVD-2026-104642

Pillow: Heap buffer overflow in ImagingJpegDecode...

Pillow: Heap buffer overflow in ImagingJpegDecode

Summary JpegImageFile.draft — which Image.thumbnail calls automatically — requests 1/2, 1/4 or 1/8 scaled JPEG output and shrinks self.size and the tile extents to match, so setimage allocates a single-row decode buffer of ceilW/s samples. ImagingJpegDecode sets cinfo.scalenum/scaledenom, calls...

GHSA-8G5G-8VMR-9782 Pillow: Heap buffer overflow in ImagingJpegDecode

Summary JpegImageFile.draft — which Image.thumbnail calls automatically — requests 1/2, 1/4 or 1/8 scaled JPEG output and shrinks self.size and the tile extents to match, so setimage allocates a single-row decode buffer of ceilW/s samples. ImagingJpegDecode sets cinfo.scalenum/scaledenom, calls...

PT-2026-120305

Summary JpegImageFile.draft — which Image.thumbnail calls automatically — requests 1/2, 1/4 or 1/8 scaled JPEG output and shrinks self. size and the tile extents to match, so setimage allocates a single-row decode buffer of ceilW/s samples. ImagingJpegDecode sets cinfo.scale num/scale denom, call...

Linux Distros Unpatched Vulnerability : CVE-2026-112403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale...

DEBIAN-CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403 Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JP...

CVE-2026-112403

The Pillow Python imaging library contains a heap buffer overflow in the ImagingJpegDecode component affecting versions prior to 13.0.0 . The root cause is that the decoder fails to verify libjpeg 's actual output width and component count after a draft scale is requested. Specifically, an 8-bit ...

CVE-2026-75466

A flaw was found in libjpeg-turbo. This vulnerability, located in the PNG image loader, allows a remote attacker to trigger a denial of service DoS. By processing a specially crafted indexed-color PNG image, an integer division-by-zero error can occur, leading to application instability and crash...

PT-2026-117669

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The JPEG decoder in Pillow fails to verify the actual output width and component count after a scaling request is made. When an application uses draft or thumbnail to request downscaling of an 8-bit...