Most recent entries from all

BIT-pillow-2020-35654

2026-10-03T13:20:32.824750+00:00

Affected: Bitnami: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

BREW-pillow-CVE-2020-35654

2026-10-03T13:20:32.824802+00:00

Affected: Homebrew: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

certfr-2022-avi-351 — De multiples vulnérabilités ont été découvertes dans les logiciels Juniper . Certaines d'entre elles permettent à un at…

2026-10-03T13:20:32.824824+00:00

certfr-2022-avi-351

cnvd-2021-02806

2026-10-03T13:20:32.824842+00:00

cnvd-2021-02806

EUVD-2026-47678

2026-10-03T13:20:32.824854+00:00

EUVD-2026-47678

fkie_cve-2020-35654

2026-10-03T13:20:32.824864+00:00

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

GHSA-vqcj-wrf2-7v73 — Pillow Out-of-bounds Write

2026-10-03T13:20:32.824883+00:00

Affected: PyPI: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

gsd-2020-35654

2026-10-03T13:20:32.824901+00:00

gsd-2020-35654

openSUSE-SU-2021:1134-1 — Security update for python-CairoSVG, python-Pillow

2026-10-03T13:20:32.824911+00:00

Security update for python-CairoSVG, python-Pillow

PYSEC-2021-70

2026-10-03T13:20:32.824931+00:00

Affected: PyPI: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

RHSA-2021:3917 — Red Hat Security Advisory: Red Hat Quay v3.6.0 security, bug fix and enhancement update

2026-10-03T13:20:32.824947+00:00

nodejs-debug: Regular expression Denial of Service nodejs-mime: Regular expression Denial of Service nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js lodash: Prototype pollution in utilities function hoek: Prototype pollution in utilities function nodejs-url-parse: incorrect hostname in url parsing nodejs-extend: Prototype pollution can allow attackers to modify object properties nodejs-stringstream: out-of-bounds read leading to uninitialized memory exposure nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS lodash: uncontrolled resource consumption in Data handler causing denial of service nodejs-yargs-parser: prototype pollution vulnerability nodejs-lodash: prototype pollution in zipObjectDeep function nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function nodejs-highlight-js: prototype pollution via a crafted HTML code block urijs: Hostname spoofing via backslashes in URL python-pillow: Buffer over-read in PCX image reader python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow browserslist: parsing of invalid queries could result in Regular Expression Denial of Service (ReDoS) nodejs-postcss: Regular expression denial of service during source map parsing no…

SUSE-SU-2024:1673-1 — Security update for python-Pillow

2026-10-03T13:20:32.825001+00:00

Security update for python-Pillow

UBUNTU-CVE-2020-35654

2026-10-03T13:20:32.825018+00:00

Affected: Ubuntu:20.04:LTS: pillow, Ubuntu:Pro:20.04:LTS: pillow-python2

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.