python3-pillow-devel vulnerabilities (Red Hat)
12 vulnerabilities.
-
python3-pillow-develRed Hat Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) 8.3 High -
python3-pillow-develRed Hat Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` 8.2 High -
python3-pillow-develRed Hat Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading 7.5 High -
python3-pillow-develRed Hat Pillow GdImageFile decompression bomb protection bypass 7.5 High -
python3-pillow-develRed Hat Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` 7.5 High -
python3-pillow-develRed Hat Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading 7.5 High -
python3-pillow-develRed Hat Pillow buffer overflow vulnerability 6.7 Medium -
python3-pillow-develRed Hat Pillow Denial of Service vulnerability 7.5 High -
python3-pillow-develRed Hat Arbitrary Code Execution in Pillow 8.1 High -
python3-pillow-develRed Hat Arbitrary expression injection in Pillow 9.8 Critical -
python3-pillow-develRed Hat Out-of-bounds Read in Pillow 6.5 Medium -
python3-pillow-develRed Hat Improper Initialization in Pillow 6.5 Medium