Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow GdImageFile decompression bomb protection bypass

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Pillow is vulnerable to a FITS GZIP decompression bomb

Pillow is a Python imaging library

An issue was discovered in Pillow before 10.0.0

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification)

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.1.1

An issue was discovered in Pillow before 8.1.1

An issue was discovered in Pillow before 8.1.1

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container,…

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS…

Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container,…

There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large

An issue was discovered in Pillow before 6.2.0

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path

An issue was discovered in Pillow before 8.1.1

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial…

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI…

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy

Pillow: PDF Parsing Trailer Infinite Loop (DoS)

Pillow: Integer overflow when processing fonts

Pillow: Heap buffer overflow with nested list coordinates

Pillow is a Python imaging library

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c

Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted…