pillow vulnerabilities (TuxCare)
69 vulnerabilities.
pillowTuxCarePillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading7.5 HighpillowTuxCarePillow: WindowsViewer.get_command() OS command injection via unescaped shell path4.5 MediumpillowTuxCarePillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)8.6 HighpillowTuxCarePillow: PDF Parsing Trailer Infinite Loop (DoS)5.1 MediumpillowTuxCarePillow: Integer overflow when processing fonts5.1 MediumpillowTuxCarePillow: Heap buffer overflow with nested list coordinates5.1 MediumpillowTuxCarePillow is vulnerable to a FITS GZIP decompression bomb8.7 HighpillowTuxCarePillow has an out-of-bounds write when loading PSD images8.6 HighpillowTuxCarePillow Vulnerable to Write Buffer Overflow on BCn encoding7.1 HighpillowTuxCarePillow buffer overflow vulnerability6.7 MediumpillowTuxCarePillow Denial of Service vulnerability7.5 HighpillowTuxCareArbitrary Code Execution in Pillow8.1 HighpillowTuxCareDuplicate Advisory: Bundled libwebp in Pillow vulnerable8.8 HighpillowTuxCarePillow vulnerable to Data Amplification attack.7.5 HighpillowTuxCareInfinite loop in PillowNo scorepillowTuxCarePath traversal in Pillow9.1 CriticalpillowTuxCareArbitrary expression injection in Pillow9.8 CriticalpillowTuxCareOut-of-bounds Read in Pillow6.5 MediumpillowTuxCareImproper Initialization in Pillow6.5 Medium