Lucene search
+L

10 matches found

EUVD
EUVD
•added 2026/10/21 8:32 p.m.•8 views

EUVD-2026-104639

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images...

8.2CVSS5.8AI score0.00291EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/10/20 11:41 p.m.•7 views

SUSE CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

8.2CVSS6AI score0.00291EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/20 11:47 a.m.•6 views

DEBIAN-CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

8.2CVSS6AI score0.00291EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/20 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-112392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand...

8.2CVSS6AI score0.00291EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/19 10:17 p.m.•12 views

CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

8.2CVSS0.00291EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/19 9:17 p.m.•9 views

CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

8.2CVSS6AI score0.00291EPSS
SaveExploits0
Mend
Mend
•added 2026/10/19 9:17 p.m.•8 views

CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

8.2CVSS6AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•7 views

PT-2026-117653

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description Rank-based filters in the Pillow Python imaging library can dereference invalid image storage when processing a zero-size image. The ImagingExpand function allocates a non-empty output but faults...

8.2CVSS5.9AI score0.00291EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/08/02 12:00 a.m.•16 views

PT-2023-6960 · Golang +2 · Golang +2

Name of the Vulnerable Software and Affected Versions: Golang affected versions not specified Description: The issue is related to excessive CPU consumption during decoding. A maliciously-crafted image, specifically a tiled image with a height of 0 and a very large width, can cause this excessive...

7.8CVSS5.8AI score0.00933EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
•added 2012/11/21 12:00 a.m.•46 views

Fedora 17 : openstack-glance-2012.1.2-2.fc17 (2012-18085)

Fix Glance Authentication bypass for image deletion - Update to stable/essex 2012.1.2 including... - Support zero-size image creation via the v1 API - Allow admins to share images regardless of owner - Log sensitive store info, rather than exposing over API - Fix the qpidheartbeat option to avoid...

5.5CVSS5.4AI score0.03346EPSS
SaveExploits0References4
Rows per page
Query Builder