Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian python-imaging - vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2016-2533
Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow prior to 3.1.1 and Python Imaging Library (PIL) 1.1.7 and previous versions allows remote malicious users to cause a denial of service (crash) via a crafted PhotoCD file.
Python Imaging Project Python ImagingPython PillowDebian Debian Linux 8.0Debian Debian Linux 7.0
NA
CVE-2014-3589
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow prior to 2.3.2 and 2.5.x prior to 2.5.2 allows remote malicious users to cause a denial of service via a crafted block size.
Python Pillow 2.5.2Python Pillow 2.5.1Python PillowPython Pillow 2.3.0Debian Python-imaging -Python Pillow 2.5.0Opensuse Opensuse 13.2
6.5
CVSSv3
CVE-2016-0775
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow prior to 3.1.1 allows remote malicious users to cause a denial of service (crash) via a crafted FLI file.
Python PillowDebian Debian Linux 8.0Debian Debian Linux 7.0
6.5
CVSSv3
CVE-2016-0740
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow prior to 3.1.1 allows remote malicious users to overwrite memory via a crafted TIFF file.
Python PillowDebian Debian Linux 7.0Debian Debian Linux 8.0
9.8
CVSSv3
CVE-2021-34552
Pillow up to and including 8.2.0 and PIL (aka Python Imaging Library) up to and including 1.1.7 allow an malicious user to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
Python PillowDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34
9.8
CVSSv3
CVE-2020-5311
libImaging/SgiRleDecode.c in Pillow prior to 6.2.2 has an SGI buffer overflow.
Python PillowDebian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Fedoraproject Fedora 30Canonical Ubuntu Linux 19.10Fedoraproject Fedora 31
9.8
CVSSv3
CVE-2020-5312
libImaging/PcxDecode.c in Pillow prior to 6.2.2 has a PCX P mode buffer overflow.
Python PillowCanonical Ubuntu Linux 16.04Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Fedoraproject Fedora 30Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Fedoraproject Fedora 31
6.5
CVSSv3
CVE-2022-22815
path_getbbox in path.c in Pillow prior to 9.0.0 improperly initializes ImagePath.Path.
Python PillowDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.5
CVSSv3
CVE-2019-19911
There is a DoS vulnerability in Pillow prior to 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. ...
Python PillowDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04
6.5
CVSSv3
CVE-2022-22816
path_getbbox in path.c in Pillow prior to 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
Python PillowDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook