Lucene search
+L

420 matches found

osv_bit
osv_bit
•added 2026/10/26 5:56 a.m.•1 views

BIT-PILLOW-2026-112898 Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...

6.9CVSS6AI score0.00386EPSS
SaveExploits0References4
Rows per page
Query Builder