Search for packages
| purl | pkg:apk/alpine/py3-pillow@8.1.2-r0?arch=ppc64le&distroversion=v3.23&reponame=community |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3qb5-8p8w-gkad | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27921
CVE-2021-27921 GHSA-f4w8-cv6p-x6r5 PYSEC-2021-40 |
| VCID-53ac-ceq4-qkhf | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27922
CVE-2021-27922 GHSA-3wvg-mj6g-m9cv PYSEC-2021-41 |
| VCID-en6t-uxtq-bfek | An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654. |
BIT-pillow-2021-25289
CVE-2021-25289 GHSA-57h3-9rgr-c24m PYSEC-2021-35 |
| VCID-gvjw-funa-sqak | Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large. |
BIT-pillow-2021-27923
CVE-2021-27923 GHSA-95q3-8gr9-gm8w PYSEC-2021-42 |
| VCID-p6r3-puh1-zyg6 | An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c. |
BIT-pillow-2021-25293
CVE-2021-25293 GHSA-p43w-g3c5-g5mq PYSEC-2021-39 |
| VCID-rncf-9nf8-wud3 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. |
BIT-pillow-2021-25290
CVE-2021-25290 GHSA-8xjq-8fcg-g5hw PYSEC-2021-36 |
| VCID-vwbu-ruxm-tbh4 | An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries. |
BIT-pillow-2021-25291
CVE-2021-25291 GHSA-mvg9-xffr-p774 PYSEC-2021-37 |
| VCID-vxh1-8rvt-kkak | An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex. |
BIT-pillow-2021-25292
CVE-2021-25292 GHSA-9hx2-hgq2-2g4f PYSEC-2021-38 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-03T17:42:08.998838+00:00 | Alpine Linux Importer | Fixing | VCID-rncf-9nf8-wud3 | https://secdb.alpinelinux.org/v3.23/community.json | 38.1.0 |
| 2026-04-01T19:30:38.715314+00:00 | Alpine Linux Importer | Fixing | VCID-gvjw-funa-sqak | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T19:27:37.048826+00:00 | Alpine Linux Importer | Fixing | VCID-53ac-ceq4-qkhf | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T19:20:24.255622+00:00 | Alpine Linux Importer | Fixing | VCID-vxh1-8rvt-kkak | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T19:15:36.054536+00:00 | Alpine Linux Importer | Fixing | VCID-en6t-uxtq-bfek | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T19:08:31.071425+00:00 | Alpine Linux Importer | Fixing | VCID-3qb5-8p8w-gkad | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T18:53:12.636429+00:00 | Alpine Linux Importer | Fixing | VCID-vwbu-ruxm-tbh4 | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |
| 2026-04-01T18:52:21.740135+00:00 | Alpine Linux Importer | Fixing | VCID-p6r3-puh1-zyg6 | https://secdb.alpinelinux.org/v3.23/community.json | 38.0.0 |