Search for packages
| purl | pkg:apk/alpine/py3-pillow@8.1.2-r0?arch=armhf&distroversion=v3.22&reponame=community |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3rjw-e1sp-aqfn | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. |
BIT-pillow-2021-25291
CVE-2021-25291 GHSA-mvg9-xffr-p774 PYSEC-2021-37 |
| VCID-4832-cm21-mkbz | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27922
CVE-2021-27922 GHSA-3wvg-mj6g-m9cv PYSEC-2021-41 |
| VCID-846n-57qb-tuh8 | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27923
CVE-2021-27923 GHSA-95q3-8gr9-gm8w PYSEC-2021-42 |
| VCID-nrdj-11v9-dkgn | An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex. |
BIT-pillow-2021-25292
CVE-2021-25292 GHSA-9hx2-hgq2-2g4f PYSEC-2021-38 |
| VCID-s5fc-q3mp-nbb5 | An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654. |
BIT-pillow-2021-25289
CVE-2021-25289 GHSA-57h3-9rgr-c24m PYSEC-2021-35 |
| VCID-vsmy-1y7h-67ay | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. |
BIT-pillow-2021-25290
CVE-2021-25290 GHSA-8xjq-8fcg-g5hw PYSEC-2021-36 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-29T10:07:37.277462+00:00 | Alpine Linux Importer | Fixing | VCID-vsmy-1y7h-67ay | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |
| 2026-05-29T10:04:52.212643+00:00 | Alpine Linux Importer | Fixing | VCID-846n-57qb-tuh8 | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |
| 2026-05-29T09:58:28.339664+00:00 | Alpine Linux Importer | Fixing | VCID-3rjw-e1sp-aqfn | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |
| 2026-05-29T09:58:06.695170+00:00 | Alpine Linux Importer | Fixing | VCID-nrdj-11v9-dkgn | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |
| 2026-05-29T09:50:36.367447+00:00 | Alpine Linux Importer | Fixing | VCID-s5fc-q3mp-nbb5 | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |
| 2026-05-29T09:42:10.996528+00:00 | Alpine Linux Importer | Fixing | VCID-4832-cm21-mkbz | https://secdb.alpinelinux.org/v3.22/community.json | 38.6.0 |