Search for packages
| purl | pkg:apk/alpine/py3-pillow@8.1.2-r0?arch=aarch64&distroversion=v3.16&reponame=community |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3rjw-e1sp-aqfn | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. |
BIT-pillow-2021-25291
CVE-2021-25291 GHSA-mvg9-xffr-p774 PYSEC-2021-37 |
| VCID-4832-cm21-mkbz | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27922
CVE-2021-27922 GHSA-3wvg-mj6g-m9cv PYSEC-2021-41 |
| VCID-846n-57qb-tuh8 | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27923
CVE-2021-27923 GHSA-95q3-8gr9-gm8w PYSEC-2021-42 |
| VCID-cdet-k6ha-ukby | An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. |
BIT-pillow-2021-25293
CVE-2021-25293 GHSA-p43w-g3c5-g5mq PYSEC-2021-39 |
| VCID-ktr7-za57-u7cc | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27921
CVE-2021-27921 GHSA-f4w8-cv6p-x6r5 PYSEC-2021-40 |
| VCID-s5fc-q3mp-nbb5 | An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654. |
BIT-pillow-2021-25289
CVE-2021-25289 GHSA-57h3-9rgr-c24m PYSEC-2021-35 |
| VCID-vsmy-1y7h-67ay | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. |
BIT-pillow-2021-25290
CVE-2021-25290 GHSA-8xjq-8fcg-g5hw PYSEC-2021-36 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-29T10:03:37.413104+00:00 | Alpine Linux Importer | Fixing | VCID-ktr7-za57-u7cc | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T10:00:49.337247+00:00 | Alpine Linux Importer | Fixing | VCID-vsmy-1y7h-67ay | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T09:59:20.489896+00:00 | Alpine Linux Importer | Fixing | VCID-3rjw-e1sp-aqfn | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T09:46:01.565437+00:00 | Alpine Linux Importer | Fixing | VCID-cdet-k6ha-ukby | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T09:42:05.466906+00:00 | Alpine Linux Importer | Fixing | VCID-846n-57qb-tuh8 | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T09:36:16.036816+00:00 | Alpine Linux Importer | Fixing | VCID-4832-cm21-mkbz | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |
| 2026-05-29T09:33:00.893751+00:00 | Alpine Linux Importer | Fixing | VCID-s5fc-q3mp-nbb5 | https://secdb.alpinelinux.org/v3.16/community.json | 38.6.0 |