High
CVE-2016-3076
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 96
Reset filters
High
CVE-2014-1932
The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (P
High
CVE-2014-9601
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
High
CVE-2014-3598
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
High
CVE-2014-3589
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
High
CVE-2022-24303
Path traversal in Pillow
Low
ghsa-4fx9-vc88-q2xc
Infinite loop in Pillow
Critical
CVE-2022-22817
Arbitrary expression injection in Pillow
Medium
CVE-2022-22816
Out-of-bounds Read in Pillow
Medium
CVE-2022-22815
Improper Initialization in Pillow
High
CVE-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
High
CVE-2021-23437
Uncontrolled Resource Consumption in pillow
Critical
CVE-2021-34552
Buffer Overflow in Pillow
Medium
CVE-2021-28678
Insufficient Verification of Data Authenticity in Pillow
High
CVE-2021-28677
Uncontrolled Resource Consumption in Pillow
High
CVE-2021-28676
Potential infinite loop in Pillow
High
CVE-2021-25288
Pillow Out-of-bounds Read vulnerability
High
CVE-2021-25287
Out-of-bounds Read in Pillow
High
CVE-2021-28675
Pillow denial of service
Medium
ghsa-jgpv-4h4c-xhw3
Uncontrolled Resource Consumption in pillow
High
CVE-2021-25293
Out of bounds read in Pillow
Medium
CVE-2021-25292
Regular Expression Denial of Service (ReDoS) in Pillow
High
CVE-2021-25291
Out of bounds read in Pillow
High
CVE-2021-25290
Out-of-bounds Write in Pillow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.