Security Advisories for Pillow in pypi
High
3 months ago
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
pypi
pillow
High
3 months ago
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
pypi
pillow
Moderate
3 months ago
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
pypi
pillow
High
3 months ago
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
pypi
Pillow
Moderate
3 months ago
Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
pypi
Pillow
High
3 months ago
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
pypi
Pillow
Moderate
3 months ago
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
pypi
Pillow
High
3 months ago
Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
pypi
pillow
High
3 months ago
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
pypi
pillow
High
3 months ago
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
pypi
pillow
High
5 months ago
Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
pypi
pillow
High
over 1 year ago
Pillow vulnerability can cause write buffer overflow on BCn encoding
pypi
pillow
High
over 4 years ago
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
pypi
pillow
High
almost 7 years ago
DOS attack in Pillow when processing specially crafted image files
pypi
pillow
High
about 8 years ago
Arbitrary code using "crafted image file" approach affecting Pillow
pypi
Pillow