Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

Pillow

pypi

Python Imaging Library (fork)

View on github.com · View on pypi.org

Security Advisories for Pillow in pypi

High
about 2 months ago

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch GSA_kwCzR0hTQS05aHc5LWNoNzktNHZoNs4ABcRb

pypi pillow
High
about 2 months ago

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service GSA_kwCzR0hTQS12amM0LTVxcDUtbTQ0as4ABcRa

pypi pillow
Moderate
about 2 months ago

Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service GSA_kwCzR0hTQS1wZzd2LWp3ajctcDc5OM4ABcRZ

pypi pillow
High
about 2 months ago

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() GSA_kwCzR0hTQS1qamo2LW13OWYtcDU2Nc4ABcRY

pypi Pillow
High
about 2 months ago

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow GSA_kwCzR0hTQS02cjh4LTU3YzktMjhqNM4ABcRX

pypi Pillow
Moderate
about 2 months ago

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images GSA_kwCzR0hTQS1majd2LXI5OW0tMjJncc4ABcRW

pypi Pillow
High
about 2 months ago

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand` GSA_kwCzR0hTQS14ajk2LTYzZ3AtMmdtcs4ABcRV

pypi Pillow
Moderate
about 2 months ago

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path GSA_kwCzR0hTQS00eDRqLTJnN2MtODN3Ns4ABcP4

pypi Pillow
High
about 2 months ago

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()` GSA_kwCzR0hTQS1waGo5LW12NHctNjVwbc4ABcP3

pypi pillow
High
about 2 months ago

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading GSA_kwCzR0hTQS00NWhxLWN4d2gtZjZ2Y84ABcP2

pypi pillow
High
about 2 months ago

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` GSA_kwCzR0hTQS01eDk0LTY5cngtZzhoMs4ABcP1

pypi pillow
High
about 2 months ago

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading GSA_kwCzR0hTQS04djg0LWY5cHEtd3I5eM4ABcP0

pypi pillow
High
about 2 months ago

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) GSA_kwCzR0hTQS02MnA0LWdtZjctN2c5M84ABcPy

pypi pillow
High
4 months ago

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow) GSA_kwCzR0hTQS1wd3Y2LXZ2NDMtODhncs4ABWI0

pypi pillow
Moderate
4 months ago

Pillow has a PDF Parsing Trailer Infinite Loop (DoS) GSA_kwCzR0hTQS1yNzNqLXBxajUtdzN4N84ABWIz

pypi pillow
Moderate
4 months ago

Pillow has an integer overflow when processing fonts GSA_kwCzR0hTQS13ang0LTRqY2otZzk4as4ABWIy

pypi pillow
Moderate
4 months ago

Pillow has a heap buffer overflow with nested list coordinates GSA_kwCzR0hTQS01eG13LXZjOXYtNHdmMs4ABWIx

pypi pillow
High
5 months ago

FITS GZIP decompression bomb in Pillow GSA_kwCzR0hTQS13aGo0LTZ4NXgtNHYyas4ABVLv

pypi pillow
High
7 months ago

Pillow affected by out-of-bounds write when loading PSD images GSA_kwCzR0hTQS1jZmgzLTNqbXAtcnZoY84ABSNi

pypi pillow
High
about 1 year ago

Pillow vulnerability can cause write buffer overflow on BCn encoding GSA_kwCzR0hTQS14ZzhoLWo0NmYtdzk1Ms4ABJme

pypi pillow
High
over 2 years ago

Pillow buffer overflow vulnerability GSA_kwCzR0hTQS00NHdtLWYyNDQteGhwM84AA6j6

pypi pillow
Critical
over 2 years ago

Arbitrary Code Execution in Pillow GSA_kwCzR0hTQS0zZjYzLWhmcDgtNTJqcc4AA4lV

pypi Pillow
High
almost 3 years ago

Pillow Denial of Service vulnerability GSA_kwCzR0hTQS04Z2hqLXA0dmotbXIzNc4AA250

pypi pillow
High
almost 4 years ago

Pillow vulnerable to Data Amplification attack. GSA_kwCzR0hTQS1tMnZ2LTV2ajUtMmhtN84AAv2p

pypi pillow
High
almost 4 years ago

Pillow subject to DoS via SAMPLESPERPIXEL tag GSA_kwCzR0hTQS1xNG1wLWp2aDItNzZmas4AAv2m

pypi pillow
High
over 4 years ago

Buffer over-flow in Pillow GSA_kwCzR0hTQS1ocjhnLWY2cjYtbXIyMs4AArN6

pypi Pillow
Critical
over 4 years ago

Buffer Copy without Checking Size of Input in Pillow GSA_kwCzR0hTQS1yN3JtLThqNmgtcjkzM84AAjLe

pypi pillow
Critical
over 4 years ago

Pillow command injection GSA_kwCzR0hTQS04bTl4LXB4d3EtajIzNs4AAelu

pypi pillow
High
over 4 years ago

Pillow Buffer overflow in Jpeg2KEncode.c GSA_kwCzR0hTQS12OXBjLTltdnAteDg3Z84AAbp5

pypi pillow
High
over 4 years ago

PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles GSA_kwCzR0hTQS14ODk1LTJ3cm0taHZwN84AAbcx

pypi pillow
High
over 4 years ago

Pillow denial of service via PNG bomb GSA_kwCzR0hTQS1oNXJmLXZncXgtd2p2Ms4AAU_b

pypi pillow
High
over 4 years ago

Pillow denial of service via Crafted Block Size GSA_kwCzR0hTQS1jZm1yLTM4ZzktZjJoN84AAU-s

pypi pillow
High
over 4 years ago

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin GSA_kwCzR0hTQS1qNmY3LWc0MjUtNGdteM4AAU-u

pypi pillow
Low
over 4 years ago

Infinite loop in Pillow GSA_kwCzR0hTQS00Zng5LXZjODgtcTJ4Y80yIw

pypi Pillow
High
over 4 years ago

Path traversal in Pillow GSA_kwCzR0hTQS05ajU5LTc1cWotNzk1d80yIg

pypi Pillow
Moderate
over 4 years ago

Improper Initialization in Pillow GSA_kwCzR0hTQS1wdzNjLWg3d3AtY3ZoeM0hfQ

pypi Pillow
Moderate
over 4 years ago

Out-of-bounds Read in Pillow GSA_kwCzR0hTQS14cmN2LWY5Z20tdjQyY80hew

pypi Pillow
Critical
over 4 years ago

Arbitrary expression injection in Pillow GSA_kwCzR0hTQS04dmoyLXZ4eDMtNjY3d80hfA

pypi Pillow
Critical
almost 5 years ago

PCX P mode buffer overflow in Pillow GSA_kwCzR0hTQS1wNDloLWhqdm0tamczaM0W2w

pypi Pillow
High
almost 5 years ago

Out-of-bounds read in Pillow GSA_kwCzR0hTQS0zeHY4LTNqNTQtaGdycM0W2g

pypi Pillow
Critical
almost 5 years ago

Integer overflow in Pillow GSA_kwCzR0hTQS12Y3FnLTNwMjkteHc3M80W2Q

pypi pillow
Critical
almost 5 years ago

Buffer Overflow in Pillow GSA_kwCzR0hTQS03NTM0LW1tNDUtYzc0ds0WKQ

pypi pillow
High
about 5 years ago

Uncontrolled Resource Consumption in pillow GSA_kwCzR0hTQS05OHZ2LXB3NnItcTZxNM0VnA

pypi pillow
High
over 5 years ago

Uncontrolled Resource Consumption in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE1aHEtZnA3Ni1xbXJj

pypi Pillow
High
over 5 years ago

Pillow Out-of-bounds Read vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ3djctM3Y0NS1oZzI5

pypi Pillow
Moderate
over 5 years ago

Insufficient Verification of Data Authenticity in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZngtOHA2Yy1nN2d4

pypi Pillow
High
over 5 years ago

Pillow denial of service MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc2cmotcnY3ai14d3A0

pypi Pillow
High
over 5 years ago

Out-of-bounds Read in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc3Z2MtdjJ4di1ydnZo

pypi Pillow
High
over 5 years ago

Potential infinite loop in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdyN20tNWgyNy0yOWhw

pypi Pillow
Moderate
over 5 years ago

Uncontrolled Resource Consumption in pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpncHYtNGg0Yy14aHcz

pypi pillow
High
over 5 years ago

Out of bounds read in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW12ZzkteGZmci1wNzc0

pypi Pillow
Moderate
over 5 years ago

Regular Expression Denial of Service (ReDoS) in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloeDItaGdxMi0yZzRm

pypi Pillow
High
over 5 years ago

Out-of-bounds Write in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh4anEtOGZjZy1nNWh3

pypi pillow
High
over 5 years ago

Out of bounds read in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA0M3ctZzNjNS1nNW1x

pypi Pillow
Critical
over 5 years ago

Out of bounds write in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU3aDMtOXJnci1jMjRt

pypi pillow
High
over 5 years ago

Pillow Out-of-bounds Read MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY1ZzgtNXFxNy05Mzh3

pypi pillow
Moderate
over 5 years ago

Pillow Out-of-bounds Read MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhmNjQteDRncS1wOTlo

pypi pillow
High
over 5 years ago

Pillow Out-of-bounds Write MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZxY2otd3JmMi03djcz

pypi Pillow
High
over 5 years ago

Pillow Uncontrolled Resource Consumption MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN3dmctbWo2Zy1tOWN2

pypi pillow
High
over 5 years ago

Pillow Denial of Service by Uncontrolled Resource Consumption MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY0dzgtY3Y2cC14NnI1

pypi Pillow
High
over 5 years ago

Pillow Denial of Service by Uncontrolled Resource Consumption MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk1cTMtOGdyOS1nbTh3

pypi pillow
High
about 6 years ago

Out-of-bounds reads in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNxaGcteGpoaC1wOGhm

pypi Pillow
High
about 6 years ago

Buffer overflow in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NDMtbTdtdy1teHFt

pypi Pillow
High
about 6 years ago

Out-of-bounds reads in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZqNDIteHEzci1ocjNy

pypi Pillow
Critical
about 6 years ago

Out-of-bounds read in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQzZnEtdzhxcS12ODho

pypi Pillow
Moderate
over 6 years ago

Pillow Temporary file name leakage MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI4NTQtOTZncS1yZmcz

pypi Pillow
High
over 6 years ago

Uncontrolled Resource Consumption in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVnbTMtcHg2NC1ydzcy

pypi pillow
High
over 6 years ago

Out-of-bounds Read in Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqNjktYzc2di04Nndy

pypi Pillow
High
almost 7 years ago

DOS attack in Pillow when processing specially crafted image files MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo3bWotNzQ4eC03cDc4

pypi pillow
Critical
about 8 years ago

Pillow Integer overflow in ImagingResampleHorizontal MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh2cjgtNDY2cC03NXJo

pypi pillow
High
about 8 years ago

Pillow Buffer overflow in ImagingFliDecode MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTh4anYtdjl4cS1tNWg5

pypi Pillow
High
about 8 years ago

Pillow buffer overflow in ImagingPcdDecode MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNjNWMtNzIzNS05OTRq

pypi pillow
Moderate
about 8 years ago

Pillow Integer overflow in Map.c MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJ3cjMtYzJxOC1nbTU2

pypi pillow
Moderate
about 8 years ago

Pillow Buffer overflow in ImagingLibTiffDecode MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhnZ3gtM2g3Mi00OXd3

pypi pillow
High
about 8 years ago

Arbitrary code using "crafted image file" approach affecting Pillow MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXc0dmctcmY2My1mM2oz

pypi Pillow

Filter by Severity

High 49 Moderate 15 Critical 10 Low 1