rpm package
opensuse/python-Pillow&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/python-Pillow&distro=openSUSE%20Tumbleweed
Vulnerabilities (36)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-34552 | Cri | 9.8 | < 8.3.2-1.2 | 8.3.2-1.2 | Jul 13, 2021 | Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c. | |
| CVE-2021-25293 | Hig | 7.5 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. | |
| CVE-2021-25292 | Med | 6.5 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex. | |
| CVE-2021-25291 | Hig | 7.5 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. | |
| CVE-2021-25290 | Hig | 7.5 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. | |
| CVE-2021-25289 | Cri | 9.8 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 19, 2021 | An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654. | |
| CVE-2021-27921 | Hig | 7.5 | < 8.3.2-1.2 | 8.3.2-1.2 | Mar 3, 2021 | Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large. | |
| CVE-2020-35655 | Med | 5.4 | < 8.3.2-1.2 | 8.3.2-1.2 | Jan 12, 2021 | In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled. | |
| CVE-2020-35654 | Hig | 8.8 | < 8.3.2-1.2 | 8.3.2-1.2 | Jan 12, 2021 | In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. | |
| CVE-2020-35653 | Hig | 7.1 | < 8.3.2-1.2 | 8.3.2-1.2 | Jan 12, 2021 | In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations. | |
| CVE-2020-15999 | Cri | 9.6 | KEV | < 8.3.2-1.2 | 8.3.2-1.2 | Nov 3, 2020 | Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
| CVE-2016-3076 | Med | 5.5 | < 3.4.2-1.1 | 3.4.2-1.1 | Apr 24, 2017 | Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file. | |
| CVE-2016-0775 | Med | 6.5 | < 3.4.2-1.1 | 3.4.2-1.1 | Apr 13, 2016 | Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file. | |
| CVE-2016-0740 | Med | 6.5 | < 3.4.2-1.1 | 3.4.2-1.1 | Apr 13, 2016 | Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. | |
| CVE-2014-3598 | — | < 3.4.2-1.1 | 3.4.2-1.1 | May 1, 2015 | The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image. | ||
| CVE-2014-3589 | — | < 3.4.2-1.1 | 3.4.2-1.1 | Aug 25, 2014 | PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size. |
- affected < 8.3.2-1.2fixed 8.3.2-1.2
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
- affected < 8.3.2-1.2fixed 8.3.2-1.2
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- affected < 3.4.2-1.1fixed 3.4.2-1.1
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
- affected < 3.4.2-1.1fixed 3.4.2-1.1
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
- affected < 3.4.2-1.1fixed 3.4.2-1.1
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
- CVE-2014-3598May 1, 2015affected < 3.4.2-1.1fixed 3.4.2-1.1
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
- CVE-2014-3589Aug 25, 2014affected < 3.4.2-1.1fixed 3.4.2-1.1
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
Page 2 of 2