Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path

An issue was discovered in Pillow before 8.1.1

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial…

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI…

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy

Pillow: PDF Parsing Trailer Infinite Loop (DoS)

Pillow: Integer overflow when processing fonts

Pillow: Heap buffer overflow with nested list coordinates

Pillow is a Python imaging library

An issue was discovered in Pillow before 8.2.0

An issue was discovered in Pillow before 8.2.0

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file

In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c

Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted…

Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting…

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path