python-pillow vulnerabilities (Mageia)
50 vulnerabilities.
-
python-pillowMageia Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) 8.3 High -
python-pillowMageia Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` 8.2 High -
python-pillowMageia Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images 6.5 Medium -
python-pillowMageia Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch 7.5 High -
python-pillowMageia Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service 5.3 Medium -
python-pillowMageia Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow 7.5 High -
python-pillowMageia Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service 8.7 High -
python-pillowMageia Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading 7.5 High -
python-pillowMageia Pillow GdImageFile decompression bomb protection bypass 7.5 High -
python-pillowMageia Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` 7.5 High -
python-pillowMageia Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading 7.5 High -
python-pillowMageia Pillow: PDF Parsing Trailer Infinite Loop (DoS) 5.1 Medium -
python-pillowMageia Pillow: Integer overflow when processing fonts 5.1 Medium -
python-pillowMageia Pillow buffer overflow vulnerability 6.7 Medium -
python-pillowMageia Pillow Denial of Service vulnerability 7.5 High -
python-pillowMageia Arbitrary Code Execution in Pillow 8.1 High -
python-pillowMageia Pillow vulnerable to Data Amplification attack. 7.5 High -
python-pillowMageia Buffer over-flow in Pillow 9.8 Critical -
python-pillowMageia Path traversal in Pillow 9.1 Critical -
python-pillowMageia Arbitrary expression injection in Pillow 9.8 Critical -
python-pillowMageia Out-of-bounds Read in Pillow 6.5 Medium -
python-pillowMageia Improper Initialization in Pillow 6.5 Medium -
python-pillowMageia Regular Expression Denial of Service (ReDoS) 7.5 High -
python-pillowMageia Buffer Overflow in Pillow 9.8 Critical -
python-pillowMageia Insufficient Verification of Data Authenticity in Pillow 5.5 Medium -
python-pillowMageia Uncontrolled Resource Consumption in Pillow 7.5 High -
python-pillowMageia Potential infinite loop in Pillow 7.5 High -
python-pillowMageia Pillow denial of service 5.5 Medium -
python-pillowMageia Pillow Out-of-bounds Read vulnerability 9.1 Critical -
python-pillowMageia Out-of-bounds Read in Pillow 9.1 Critical -
python-pillowMageia Out-of-bounds reads in Pillow 5.5 Medium -
python-pillowMageia Out-of-bounds read in Pillow 8.1 High -
python-pillowMageia Out-of-bounds reads in Pillow 5.5 Medium -
python-pillowMageia Out-of-bounds read in Pillow 5.5 Medium -
python-pillowMageia Uncontrolled Resource Consumption in Pillow 7.5 High -
python-pillowMageia Integer overflow in Pillow 8.8 High -
python-pillowMageia Buffer Copy without Checking Size of Input in Pillow 9.8 Critical -
python-pillowMageia PCX P mode buffer overflow in Pillow 9.8 Critical -
python-pillowMageia Out-of-bounds Read in Pillow 7.1 High -
python-pillowMageia DOS attack in Pillow when processing specially crafted image files 7.5 High -
python-pillowMageia Arbitrary code using "crafted image file" approach affecting Pillow 7.8 High -
python-pillowMageia Pillow Integer overflow in Map.c 5.5 Medium -
python-pillowMageia Pillow Buffer overflow in Jpeg2KEncode.c 5.5 Medium -
python-pillowMageia Pillow Buffer overflow in ImagingFliDecode 6.5 Medium -
python-pillowMageia Pillow Buffer overflow in ImagingLibTiffDecode 6.5 Medium -
python-pillowMageia Pillow denial of service via PNG bomb 5.0 Medium -
python-pillowMageia Pillow denial of service via Crafted Block Size 5.0 Medium -
python-pillowMageia Pillow command injection 10.0 High -
python-pillowMageia Pillow Temporary file name leakage 2.1 Low -
python-pillowMageia PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles 4.4 Medium