python-pillow vulnerabilities (openEuler)
31 vulnerabilities.
-
python-pillowopenEuler Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) 8.3 High -
python-pillowopenEuler Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` 8.2 High -
python-pillowopenEuler Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() 7.5 High -
python-pillowopenEuler Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images 6.5 Medium -
python-pillowopenEuler Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch 7.5 High -
python-pillowopenEuler Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow 7.5 High -
python-pillowopenEuler Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service 8.7 High -
python-pillowopenEuler Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading 7.5 High -
python-pillowopenEuler Pillow GdImageFile decompression bomb protection bypass 7.5 High -
python-pillowopenEuler Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` 7.5 High -
python-pillowopenEuler Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading 7.5 High -
python-pillowopenEuler Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow) 8.6 High -
python-pillowopenEuler Pillow: PDF Parsing Trailer Infinite Loop (DoS) 5.1 Medium -
python-pillowopenEuler Pillow: Integer overflow when processing fonts 5.1 Medium -
python-pillowopenEuler Pillow is vulnerable to a FITS GZIP decompression bomb 8.7 High -
python-pillowopenEuler Pillow has an out-of-bounds write when loading PSD images 8.6 High -
python-pillowopenEuler Pillow buffer overflow vulnerability 6.7 Medium -
python-pillowopenEuler Pillow Denial of Service vulnerability 7.5 High -
python-pillowopenEuler Arbitrary Code Execution in Pillow 8.1 High -
python-pillowopenEuler Pillow subject to DoS via SAMPLESPERPIXEL tag 7.5 High -
python-pillowopenEuler Pillow vulnerable to Data Amplification attack. 7.5 High -
python-pillowopenEuler Path traversal in Pillow 9.1 Critical -
python-pillowopenEuler Arbitrary expression injection in Pillow 9.8 Critical -
python-pillowopenEuler Out-of-bounds Read in Pillow 6.5 Medium -
python-pillowopenEuler Improper Initialization in Pillow 6.5 Medium -
python-pillowopenEuler Regular Expression Denial of Service (ReDoS) 7.5 High -
python-pillowopenEuler Pillow Denial of Service by Uncontrolled Resource Consumption 7.5 High -
python-pillowopenEuler Pillow Uncontrolled Resource Consumption 7.5 High -
python-pillowopenEuler Pillow Denial of Service by Uncontrolled Resource Consumption 7.5 High -
python-pillowopenEuler Pillow Out-of-bounds Read 5.4 Medium -
python-pillowopenEuler Pillow Out-of-bounds Read 7.1 High