Search for packages
| purl | pkg:deb/debian/pillow@7.0.0-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-b3au-rcgp-2fag | There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer. |
CVE-2019-19911
GHSA-5gm3-px64-rw72 PYSEC-2020-172 |
| VCID-hmmq-5772-bycm | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. |
BIT-pillow-2020-5313
CVE-2020-5313 GHSA-hj69-c76v-86wr PYSEC-2020-84 |
| VCID-m3tm-h4q9-9yay | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. |
BIT-pillow-2020-5311
CVE-2020-5311 GHSA-r7rm-8j6h-r933 PYSEC-2020-82 |
| VCID-sns1-ksqr-vbhr | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. |
BIT-pillow-2020-5312
CVE-2020-5312 GHSA-p49h-hjvm-jg3h PYSEC-2020-83 |
| VCID-stft-hsk9-zfdy | libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. |
BIT-pillow-2020-5310
CVE-2020-5310 GHSA-vcqg-3p29-xw73 PYSEC-2020-81 |