python-Pillow vulnerabilities (openSUSE)
70 vulnerabilities.
-
python-PillowopenSUSE Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags 8.8 High -
python-PillowopenSUSE Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek) 6.5 Medium -
python-PillowopenSUSE Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer 7.7 High -
python-PillowopenSUSE Pillow: TarIO negative size field causes infinite CPU-spin loop 7.1 High -
python-PillowopenSUSE Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode 6.5 Medium -
python-PillowopenSUSE Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion 8.2 High -
python-PillowopenSUSE Pillow: Argument Injection in Ghostscript call, potentially leading into RCE 9.2 Critical -
python-PillowopenSUSE Pillow: Image.quantize() with empty palette leaks uninitialized stack memory 6.9 Medium -
python-PillowopenSUSE Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read 8.8 High -
python-PillowopenSUSE Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) 8.7 High -
python-PillowopenSUSE Pillow: MSP RLE decoder expands a tiny file into unbounded memory 8.7 High -
python-PillowopenSUSE Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle 8.7 High -
python-PillowopenSUSE Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels 8.8 High -
python-PillowopenSUSE Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform 8.7 High -
python-PillowopenSUSE Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images 8.2 High -
python-PillowopenSUSE Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS 8.7 High -
python-PillowopenSUSE Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution 9.2 Critical -
python-PillowopenSUSE Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer 5.9 Medium -
python-PillowopenSUSE Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size 6.3 Medium -
python-PillowopenSUSE Pillow: Infinite loop in MIC n_frames when the embedded TIFF 8.2 High -
python-PillowopenSUSE Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) 8.3 High -
python-PillowopenSUSE Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` 8.2 High -
python-PillowopenSUSE Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() 7.5 High -
python-PillowopenSUSE Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images 6.5 Medium -
python-PillowopenSUSE Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch 7.5 High -
python-PillowopenSUSE Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow 7.5 High -
python-PillowopenSUSE Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service 8.7 High -
python-PillowopenSUSE Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading 7.5 High -
python-PillowopenSUSE Pillow GdImageFile decompression bomb protection bypass 7.5 High -
python-PillowopenSUSE Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` 7.5 High -
python-PillowopenSUSE Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading 7.5 High -
python-PillowopenSUSE Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow) 8.6 High -
python-PillowopenSUSE Pillow is vulnerable to a FITS GZIP decompression bomb 8.7 High -
python-PillowopenSUSE Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 7.8 High -
python-PillowopenSUSE Pillow has an out-of-bounds write when loading PSD images 8.6 High -
python-PillowopenSUSE Pillow Vulnerable to Write Buffer Overflow on BCn encoding 7.1 High -
python-PillowopenSUSE Pillow buffer overflow vulnerability 6.7 Medium -
python-PillowopenSUSE Pillow Denial of Service vulnerability 7.5 High -
python-PillowopenSUSE Arbitrary Code Execution in Pillow 8.1 High -
python-PillowopenSUSE Pillow vulnerable to Data Amplification attack. 7.5 High -
python-PillowopenSUSE Buffer over-flow in Pillow 9.8 Critical -
python-PillowopenSUSE Path traversal in Pillow 9.1 Critical -
python-PillowopenSUSE Arbitrary expression injection in Pillow 9.8 Critical -
python-PillowopenSUSE Out-of-bounds Read in Pillow 6.5 Medium -
python-PillowopenSUSE Improper Initialization in Pillow 6.5 Medium -
python-PillowopenSUSE Regular Expression Denial of Service (ReDoS) 7.5 High -
python-PillowopenSUSE Buffer Overflow in Pillow 9.8 Critical -
python-PillowopenSUSE Insufficient Verification of Data Authenticity in Pillow 5.5 Medium -
python-PillowopenSUSE Uncontrolled Resource Consumption in Pillow 7.5 High -
python-PillowopenSUSE Potential infinite loop in Pillow 7.5 High - Show olderLoading…