python pillow vulnerabilities

Latest python pillow CVEs

Newest publication first

1. CVE-2016-3076 Pillow Buffer overflow in Jpeg2KEncode.c

   Published 2017-04-24

   Medium·CVSS 5.5

   Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.

2. CVE-2016-9190 Arbitrary code using "crafted image file" approach affecting Pillow

   Published 2016-11-04

   High·CVSS 7.8

   Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.

3. CVE-2016-9189 Pillow Integer overflow in Map.c

   Published 2016-11-04

   Medium·CVSS 5.5

   Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.

4. CVE-2016-4009 Pillow Integer overflow in ImagingResampleHorizontal

   Published 2016-04-13

   Critical·CVSS 9.8

   Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

5. CVE-2016-2533 Pillow buffer overflow in ImagingPcdDecode

   Published 2016-04-13

   Medium·CVSS 6.5 EPSS 4.0%

   Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

6. CVE-2016-0775 Pillow Buffer overflow in ImagingFliDecode

   Published 2016-04-13

   Medium·CVSS 6.5

   Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

7. CVE-2016-0740 Pillow Buffer overflow in ImagingLibTiffDecode

   Published 2016-04-13

   Medium·CVSS 6.5

   Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.

8. CVE-2014-3598 Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

   Published 2015-05-01

   Medium·CVSS 5.0

   The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

9. CVE-2014-9601 Pillow denial of service via PNG bomb

   Published 2015-01-16

   Medium·CVSS 5.0

   Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

10. CVE-2014-3589 Pillow denial of service via Crafted Block Size

    Published 2014-08-25

    Medium·CVSS 5.0

    PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

11. CVE-2014-3007 Pillow command injection

    Published 2014-04-27

    High·CVSS 10.0

    Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

12. CVE-2014-1932 PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

    Published 2014-04-17

    Medium·CVSS 4.4

    The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary f...

13. CVE-2014-1933 Pillow Temporary file name leakage

    Published 2014-04-17

    Low·CVSS 2.1

    The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.