Vulnerabilidades em python-pillow
60 resultadosAnálise Vexday
A biblioteca Python Pillow apresenta um perfil de risco moderado com 20 vulnerabilidades catalogadas, das quais 17 foram publicadas nos últimos 90 dias, indicando descobertas recentes aceleradas. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há casos críticos documentados, mas a fraqueza dominante CWE-787 (out-of-bounds write) sugere potencial para exploração com impacto significativo em sistemas que processam imagens não confiáveis. A concentração temporal das divulgações recomenda monitoramento ativo e planejamento de patches prioritários.
CVE-2026-112893HIGHPillow: Invalid free in FreeType glyph rendering when a stroker is activeEPSS 0.5%CVE-2026-112891MEDIUMPillow: Quadratic GIF comment copying during saveEPSS 0.5%CVE-2026-112899MEDIUMPillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitEPSS 0.5%CVE-2026-112901MEDIUMPillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutesEPSS 0.5%CVE-2026-112399HIGHPillow: APNG background disposal allocates full canvas before decompression bomb checkEPSS 0.5%CVE-2026-55379HIGHPillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loadingEPSS 0.5%CVE-2026-54058HIGHPillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)EPSS 0.5%CVE-2026-55380HIGHPillow GdImageFile decompression bomb protection bypassEPSS 0.5%CVE-2026-112395MEDIUMPillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)EPSS 0.5%CVE-2026-112892HIGHPillow: MSP RLE decoder expands a tiny file into unbounded memoryEPSS 0.5%CVE-2026-112902HIGHPillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsEPSS 0.5%CVE-2026-112897HIGHPillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripsEPSS 0.5%CVE-2026-112896HIGHPillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readEPSS 0.5%CVE-2026-96778HIGHPillow: Heap buffer overflow writing JPEG comment after ICC profile fills bufferEPSS 0.5%CVE-2026-59197HIGHPillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`EPSS 0.4%CVE-2026-112404HIGHPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelsEPSS 0.4%CVE-2026-54060HIGHPillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`EPSS 0.4%CVE-2026-54059HIGHPillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loadingEPSS 0.4%CVE-2026-25990HIGHPillow has an out-of-bounds write when loading PSD imagesEPSS 0.4%CVE-2026-59203MEDIUMPillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of serviceEPSS 0.4%