Vulnerabilidades en python-pillow
60 resultadosCVE-2026-112893HIGHPillow: Invalid free in FreeType glyph rendering when a stroker is activeEPSS 0.5%CVE-2026-112891MEDIUMPillow: Quadratic GIF comment copying during saveEPSS 0.5%CVE-2026-112899MEDIUMPillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitEPSS 0.5%CVE-2026-112901MEDIUMPillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutesEPSS 0.5%CVE-2026-112399HIGHPillow: APNG background disposal allocates full canvas before decompression bomb checkEPSS 0.5%CVE-2026-55379HIGHPillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loadingEPSS 0.5%CVE-2026-54058HIGHPillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)EPSS 0.5%CVE-2026-55380HIGHPillow GdImageFile decompression bomb protection bypassEPSS 0.5%CVE-2026-112395MEDIUMPillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)EPSS 0.5%CVE-2026-112892HIGHPillow: MSP RLE decoder expands a tiny file into unbounded memoryEPSS 0.5%CVE-2026-112902HIGHPillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsEPSS 0.5%CVE-2026-112897HIGHPillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripsEPSS 0.5%CVE-2026-112896HIGHPillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readEPSS 0.5%CVE-2026-96778HIGHPillow: Heap buffer overflow writing JPEG comment after ICC profile fills bufferEPSS 0.5%CVE-2026-59197HIGHPillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`EPSS 0.4%CVE-2026-112404HIGHPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsEPSS 0.4%CVE-2026-54060HIGHPillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`EPSS 0.4%CVE-2026-54059HIGHPillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loadingEPSS 0.4%CVE-2026-25990HIGHPillow has an out-of-bounds write when loading PSD imagesEPSS 0.4%CVE-2026-59203MEDIUMPillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of serviceEPSS 0.4%