python3-pillow vulnerabilities (AlmaLinux)
41 vulnerabilities.
-
python3-pillowAlmaLinux Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion 8.2 High -
python3-pillowAlmaLinux Pillow: Argument Injection in Ghostscript call, potentially leading into RCE 9.2 Critical -
python3-pillowAlmaLinux Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) 8.7 High -
python3-pillowAlmaLinux Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) 8.7 High -
python3-pillowAlmaLinux Pillow: MSP RLE decoder expands a tiny file into unbounded memory 8.7 High -
python3-pillowAlmaLinux Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle 8.7 High -
python3-pillowAlmaLinux Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0 8.7 High -
python3-pillowAlmaLinux Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform 8.7 High -
python3-pillowAlmaLinux Pillow: Out-of-bounds access in _imagingmorph on a zero-width image 8.7 High -
python3-pillowAlmaLinux Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images 8.2 High -
python3-pillowAlmaLinux Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution 9.2 Critical -
python3-pillowAlmaLinux Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO 9.2 Critical -
python3-pillowAlmaLinux Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree() 6.3 Medium -
python3-pillowAlmaLinux Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) 8.3 High -
python3-pillowAlmaLinux Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` 8.2 High -
python3-pillowAlmaLinux Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading 7.5 High -
python3-pillowAlmaLinux Pillow GdImageFile decompression bomb protection bypass 7.5 High -
python3-pillowAlmaLinux Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` 7.5 High -
python3-pillowAlmaLinux Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading 7.5 High -
python3-pillowAlmaLinux Pillow buffer overflow vulnerability 6.7 Medium -
python3-pillowAlmaLinux Pillow Denial of Service vulnerability 7.5 High -
python3-pillowAlmaLinux Arbitrary Code Execution in Pillow 8.1 High -
python3-pillowAlmaLinux python-pillow update No score -
python3-pillowAlmaLinux Arbitrary expression injection in Pillow 9.8 Critical -
python3-pillowAlmaLinux Out-of-bounds Read in Pillow 6.5 Medium -
python3-pillowAlmaLinux Improper Initialization in Pillow 6.5 Medium -
python3-pillowAlmaLinux Buffer Overflow in Pillow 9.8 Critical -
python3-pillowAlmaLinux Insufficient Verification of Data Authenticity in Pillow 5.5 Medium -
python3-pillowAlmaLinux Uncontrolled Resource Consumption in Pillow 7.5 High -
python3-pillowAlmaLinux Potential infinite loop in Pillow 7.5 High -
python3-pillowAlmaLinux Pillow denial of service 5.5 Medium -
python3-pillowAlmaLinux Pillow Out-of-bounds Read vulnerability 9.1 Critical -
python3-pillowAlmaLinux Out-of-bounds Read in Pillow 9.1 Critical -
python3-pillowAlmaLinux Pillow Denial of Service by Uncontrolled Resource Consumption 7.5 High -
python3-pillowAlmaLinux Pillow Uncontrolled Resource Consumption 7.5 High -
python3-pillowAlmaLinux Pillow Denial of Service by Uncontrolled Resource Consumption 7.5 High -
python3-pillowAlmaLinux Out of bounds read in Pillow 7.5 High -
python3-pillowAlmaLinux Regular Expression Denial of Service (ReDoS) in Pillow 6.5 Medium -
python3-pillowAlmaLinux Out-of-bounds Write in Pillow 7.5 High -
python3-pillowAlmaLinux Pillow Out-of-bounds Read 5.4 Medium -
python3-pillowAlmaLinux Pillow Out-of-bounds Read 7.1 High