CRITICAL9.8CVE-2020-5311Buffer Copy without Checking Size of Input in Pillow from 0, < 6.2.2
CRITICAL9.8CVE-2020-5311Buffer Copy without Checking Size of Input in Pillow from 0, < a79b65c47c7dc6fe623aadf09aa6192fc54548f3 | from 0, < 6.2.2
from 0, < 2.5.0
CRITICAL9.8Pillow command injection
from 0, < 2.5.0
CRITICAL9.8Arbitrary expression injection in Pillow
from 0, < 9.0.1
CRITICAL9.8Arbitrary expression injection in Pillow
from 0, < 9.0.0
CRITICAL9.8PCX P mode buffer overflow in Pillow
from 0, < 6.2.2
CRITICAL9.8PCX P mode buffer overflow in Pillow
from 0, < 93b22b846e0269ee9594ff71a72bec02d2bea8fd | from 0, < 6.2.2
CRITICAL9.8Buffer Overflow in Pillow
from 0, < 8.3.0
CRITICAL9.8Buffer Overflow in Pillow
from 0, < 8.3.0
CRITICAL9.8Out of bounds write in Pillow
from 0, < 8.1.1
CRITICAL9.8Out of bounds write in Pillow
from 0, < 8.1.1
CRITICAL9.8Pillow Integer overflow in ImagingResampleHorizontal
from 0, < 3.1.1
CRITICAL9.8Pillow Integer overflow in ImagingResampleHorizontal
from 0, < 4e0d9b0b9740d258ade40cce248c93777362ac1e | from 0, < 3.1.1
CRITICAL9.1Path traversal in Pillow
from 0, < 9.0.1
CRITICAL9.1Path traversal in Pillow
from 0, < 9.0.1
CRITICAL9.1Pillow Out-of-bounds Read vulnerability
>= 2.4.0, < 8.2.0
CRITICAL9.1Pillow Out-of-bounds Read vulnerability
from 0, < 8.2.0
CRITICAL9.1Out-of-bounds Read in Pillow
>= 2.4.0, < 8.2.0
CRITICAL9.1Out-of-bounds Read in Pillow
from 0, < 8.2.0
HIGH8.8Integer overflow in Pillow
from 0, < 6.2.2
HIGH8.8Integer overflow in Pillow
from 0, < 4e2def2539ec13e53a82e06c4b3daf00454100c4 | from 0, < 6.2.2
HIGH8.8Pillow Out-of-bounds Write
from 0, < 8.1.0
HIGH8.8Pillow Out-of-bounds Write
from 0, < 8.1.0
HIGH8.2Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
from 0, < 12.3.0
HIGH8.1pillow - security update
from 0, < 10.2.0
HIGH8.1Out-of-bounds read in Pillow
from 0, < 7.1.0
HIGH8.1Out-of-bounds read in Pillow
from 0, < 7.1.0
HIGH7.8Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
>= 10.3.0, < 12.2.0
HIGH7.8Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
>= 10.3.0, < 12.2.0
HIGH7.8Buffer overflow in Pillow
from 0, < 7.1.0
HIGH7.8Buffer overflow in Pillow
from 0, < 46f4a349b88915787fea3fb91348bb1665831bbb | from 0, < 7.1.0
HIGH7.8Arbitrary code using "crafted image file" approach affecting Pillow
from 0, < 3.3.2
HIGH7.8Arbitrary code using "crafted image file" approach affecting Pillow
from 0, < 3.3.2
HIGH7.7PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles
from 0, < 2.3.1
HIGH7.7PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles
from 0, < 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7 | from 0, < 2.3.1
HIGH7.5Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
>= 5.1.0, < 12.3.0
HIGH7.5Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
from 0, < 12.3.0
HIGH7.5Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
from 0, < 12.3.0
HIGH7.5Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
>= 8.2.0, < 12.3.0
HIGH7.5Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
from 0, < 12.3.0
HIGH7.5Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
from 0, < 12.3.0
HIGH7.5Pillow GdImageFile decompression bomb protection bypass
from 0, < 12.3.0
HIGH7.5Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
from 0, < 12.3.0
HIGH7.5Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
from 0, < 12.3.0
HIGH7.5Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
from 0, < 12.3.0
HIGH7.5Pillow is vulnerable to a FITS GZIP decompression bomb
>= 10.3.0, < 12.2.0
HIGH7.5Pillow is vulnerable to a FITS GZIP decompression bomb
>= 10.3.0, < 12.2.0
HIGH7.5Pillow has an out-of-bounds write when loading PSD images
>= 10.3.0, < 12.1.1
HIGH7.5Pillow has an out-of-bounds write when loading PSD images
>= 10.3.0, < 12.1.1
HIGH7.5pillow - security update
from 0, < 10.0.0
HIGH7.5pillow - security update
from 0, < 1fe1bb49c452b0318cad12ea9d97c3bef188e9a7 | from 0, < 10.0.0
HIGH7.5Pillow vulnerable to Data Amplification attack.
from 0, < 9.2.0
HIGH7.5Pillow subject to DoS via SAMPLESPERPIXEL tag
>= 9.2.0, < 9.3.0
HIGH7.5Pillow vulnerable to Data Amplification attack.
from 0, < 11918eac0628ec8ac0812670d9838361ead2d6a4 | from 0, < 9.2.0
HIGH7.5Pillow subject to DoS via SAMPLESPERPIXEL tag
from 0, < 2444cddab2f83f28687c7c20871574acbb6dbcf3 | >= 9.2.0, < 9.3.0
HIGH7.5Buffer over-flow in Pillow
>= 9.1.0, < 9.1.1
HIGH7.5Buffer over-flow in Pillow
>= 9.1.0, < 9.1.1
HIGH7.5Pillow denial of service via PNG bomb
from 0, < 2.7.0
HIGH7.5Pillow denial of service via PNG bomb
from 0, < 2.7.0
HIGH7.5python-imaging - security update
from 0, < 2.3.2
HIGH7.5Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
from 0, < 2.5.3
HIGH7.5python-imaging - security update
from 0, < 205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d | from 0, < 2.3.2, >= 2.5, < 2.5.2
HIGH7.5Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
from 0, < 2.5.3
HIGH7.5Regular Expression Denial of Service (ReDoS)
>= 5.2.0, < 8.3.2
HIGH7.5Regular Expression Denial of Service (ReDoS)
from 0, < 9e08eb8f78fdfd2f476e1b20b7cf38683754866b | from 0, < 8.3.2
HIGH7.5Uncontrolled Resource Consumption in Pillow
from 0, < 8.2.0
HIGH7.5Uncontrolled Resource Consumption in Pillow
from 0, < 8.2.0
HIGH7.5Potential infinite loop in Pillow
from 0, < 8.2.0
HIGH7.5Potential infinite loop in Pillow
from 0, < 8.2.0
HIGH7.5Out of bounds read in Pillow
from 0, < 8.2.0
HIGH7.5Out of bounds read in Pillow
from 0, < 8.1.1
HIGH7.5Out-of-bounds Write in Pillow
from 0, < 8.1.1
HIGH7.5Out-of-bounds Write in Pillow
from 0, < 8.1.1
HIGH7.5Out of bounds read in Pillow
>= 4.3.0, < 8.1.1
HIGH7.5Out of bounds read in Pillow
from 0, < 8.1.1
HIGH7.5Pillow Uncontrolled Resource Consumption
from 0, < 8.1.2
HIGH7.5Pillow Uncontrolled Resource Consumption
from 0, < 8.1.1
HIGH7.5Pillow Denial of Service by Uncontrolled Resource Consumption
from 0, < 8.1.2
HIGH7.5Pillow Denial of Service by Uncontrolled Resource Consumption
from 0, < 8.1.1
HIGH7.5Pillow Denial of Service by Uncontrolled Resource Consumption
from 0, < 8.1.2
HIGH7.5Pillow Denial of Service by Uncontrolled Resource Consumption
from 0, < 8.1.1
HIGH7.5pillow - security update
from 0, < 6.2.2
HIGH7.5pillow - security update
from 0, < 6.2.2
HIGH7.5DOS attack in Pillow when processing specially crafted image files
from 0, < 6.2.0
HIGH7.5DOS attack in Pillow when processing specially crafted image files
from 0, < 6.2.0
HIGH7.1Pillow Vulnerable to Write Buffer Overflow on BCn encoding
>= 11.2.0, < 11.3.0
HIGH7.1Pillow Vulnerable to Write Buffer Overflow on BCn encoding
from 0, < 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09, < ef98b3510e3e4f14b547762764813d7e5ca3c5a4 | >= 11.2.0, < 11.3.0
HIGH7.1pillow - security update
from 0, < 8.1.0
HIGH7.1pillow - security update
from 0, < 8.1.0
HIGH7.1Out-of-bounds Read in Pillow
from 0, < 6.2.2
HIGH7.1Out-of-bounds Read in Pillow
from 0, < a09acd0decd8a87ccce939d5ff65dab59e7d365b | from 0, < 6.2.2
MEDIUM6.5Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
>= 5.2.0, < 12.3.0
MEDIUM6.5pillow - security update
from 0, < 9.0.0
MEDIUM6.5pillow - security update
from 0, < 9.0.0
MEDIUM6.5Out-of-bounds Read in Pillow
from 0, < 9.0.0
MEDIUM6.5Out-of-bounds Read in Pillow
from 0, < 9.0.0
MEDIUM6.5Regular Expression Denial of Service (ReDoS) in Pillow
>= 5.1.0, < 8.1.1
MEDIUM6.5Regular Expression Denial of Service (ReDoS) in Pillow
from 0, < 8.1.1
MEDIUM6.5python-imaging - security update
from 0, < 3.1.1