pillow vulnerabilities (PyPI)
122 vulnerabilities.
pillowPyPIPillow GdImageFile decompression bomb protection bypass7.5 HighpillowPyPIPillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`7.5 HighpillowPyPIPillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading7.5 HighpillowPyPIPillow: WindowsViewer.get_command() OS command injection via unescaped shell path4.5 MediumpillowPyPIPillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)8.6 HighpillowPyPIPillow: PDF Parsing Trailer Infinite Loop (DoS)5.1 MediumpillowPyPIPillow: Integer overflow when processing fonts5.1 MediumpillowPyPIPillow: Heap buffer overflow with nested list coordinates5.1 MediumpillowPyPIPillow is vulnerable to a FITS GZIP decompression bomb8.7 HighpillowPyPIPillow has an out-of-bounds write when loading PSD images8.6 HighpillowPyPIPillow Vulnerable to Write Buffer Overflow on BCn encoding7.1 HighpillowPyPIPillow buffer overflow vulnerability6.7 MediumpillowPyPIPillow Denial of Service vulnerability7.5 HighpillowPyPIArbitrary Code Execution in Pillow8.1 HighpillowPyPIPillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.No scorepillowPyPIWith a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...10.0 CriticalpillowPyPIDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighpillowPyPIPillow subject to DoS via SAMPLESPERPIXEL tag7.5 HighpillowPyPIPillow vulnerable to Data Amplification attack.7.5 HighpillowPyPIInvalid-free in _deallocNo scorepillowPyPISegv on unknown address in jpeg_read_scanlinesNo scorepillowPyPIBuffer over-flow in Pillow9.8 CriticalpillowPyPIInfinite loop in PillowNo scorepillowPyPIPath traversal in Pillow9.1 CriticalpillowPyPIArbitrary expression injection in Pillow9.8 CriticalpillowPyPIOut-of-bounds Read in Pillow6.5 MediumpillowPyPIImproper Initialization in Pillow6.5 MediumpillowPyPIRegular Expression Denial of Service (ReDoS)7.5 HighpillowPyPIBuffer Overflow in Pillow9.8 CriticalpillowPyPIInsufficient Verification of Data Authenticity in Pillow5.5 MediumpillowPyPIUncontrolled Resource Consumption in Pillow7.5 HighpillowPyPIPotential infinite loop in Pillow7.5 HighpillowPyPIPillow denial of service5.5 MediumpillowPyPIPillow Out-of-bounds Read vulnerability9.1 CriticalpillowPyPIOut-of-bounds Read in Pillow9.1 CriticalpillowPyPIPillow Denial of Service by Uncontrolled Resource Consumption7.5 HighpillowPyPIPillow Uncontrolled Resource Consumption7.5 HighpillowPyPIPillow Denial of Service by Uncontrolled Resource Consumption7.5 HighpillowPyPIOut of bounds read in Pillow7.5 HighpillowPyPIRegular Expression Denial of Service (ReDoS) in Pillow6.5 MediumpillowPyPIOut of bounds read in Pillow7.5 HighpillowPyPIOut-of-bounds Write in Pillow7.5 HighpillowPyPIOut of bounds write in Pillow9.8 CriticalpillowPyPIPillow Out-of-bounds Read5.4 MediumpillowPyPIPillow Out-of-bounds Write8.8 HighpillowPyPIPillow Out-of-bounds Read7.1 HighpillowPyPIOut-of-bounds reads in Pillow5.5 MediumpillowPyPIOut-of-bounds read in Pillow8.1 HighpillowPyPIOut-of-bounds reads in Pillow5.5 MediumpillowPyPIBuffer overflow in Pillow7.8 High- Show moreLoading…