https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:19:03 +0000 https://cve.radiocsirt.org/vuln/cve-2016-9190 <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> <p>Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the &#34;crafted image file&#34; approach, related to an &#34;Insecure Sign Extension&#34; issue affecting the ImagingNew in Storage.c component.</p> https://cve.radiocsirt.org/vuln/cve-2016-9190 https://cve.radiocsirt.org/vuln/usn-3230-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: pillow, Ubuntu:16.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9601)</p> <p>Cris Neckar discovered that Pillow incorrectly handled certain malformed images. A remote attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2016-9189)</p> <p>Cris Neckar discovered that Pillow incorrectly handled certain malformed images. A remote attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9190)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: pillow, Ubuntu:16.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause Pillow to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9601)</p> <p>Cris Neckar discovered that Pillow incorrectly handled certain malformed images. A remote attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2016-9189)</p> <p>Cris Neckar discovered that Pillow incorrectly handled certain malformed images. A remote attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9190)</p> https://cve.radiocsirt.org/vuln/usn-3230-1