Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 113

Export CSV
CVE-2020-5310

python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 1 more
CVE-2020-35655

python-pillow: Buffer over-read in SGI RLE image reader

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

CVSS 3.1 · 5.4 Medium EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux
CVE-2020-35654

python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Quay
CVE-2020-35653

python-pillow: Buffer over-read in PCX image reader

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

CVSS 3.1 · 7.1 High EPSS 1.6% KEV · Not listed
Vendors
Debian Fedoraproject Python and 1 more
Products
Debian Linux Fedora Pillow and 2 more
CVE-2020-11538

python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

CVSS 3.1 · 8.1 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 4 more
CVE-2020-10379

python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode()

In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 1 more
CVE-2020-10378

python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 1 more
CVE-2019-19911

python-pillow: uncontrolled resource consumption in FpxImagePlugin.py

There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-16865

python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux and 1 more