Search CVE reports
51 – 57 of 57 results
CVE-2016-0740
Medium prioritySome fixes available 1 of 3
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | Not affected |
| python-imaging | — | — | — | — | Not in release |
CVE-2014-3598
Medium priorityThe Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | — |
| python-imaging | — | — | — | — | — |
CVE-2014-9601
Low prioritySome fixes available 2 of 3
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | Not affected |
| python-imaging | — | — | — | — | Not in release |
CVE-2014-3589
Low prioritySome fixes available 2 of 4
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | Not affected |
| python-imaging | — | — | — | — | Not in release |
CVE-2014-3007
Medium priorityPython Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | — |
| python-imaging | — | — | — | — | — |
CVE-2014-1933
Medium priorityThe (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to...
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | — |
| python-imaging | — | — | — | — | — |
CVE-2014-1932
Medium priorityThe (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and...
2 affected packages
pillow, python-imaging
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| pillow | — | — | — | — | — |
| python-imaging | — | — | — | — | — |