Pillow: MSP RLE decoder expands a tiny file into unbounded memory
CVE-2026-112892
### Summary The MSP RLE decoder expands run-length data into an in-memory buffer with no cap tied to the declared image
#severity:high
共收录 5396 条相关情报。
← 返回所有主题Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112894
``` ============================================================================ Quadratic-time DoS in PDF save_all (Pdf
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-112390
``` ============================================================================ Infinite loop in MIC n_frames when the
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112392
``` ============================================================================ NULL dereference in ImagingExpand via r
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
CVE-2026-112405
### Summary `Image.merge()` checks the mode of every input band except band 0. If band 0 is a single-band `I` or `F` ima
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
CVE-2026-112893
### Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
CVE-2026-112402
``` ============================================================================ Double free in ImagingScaleAffine on ca
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in...
CVE-2026-82814
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, an
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len...
CVE-2026-114117
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary...
CVE-2026-114197
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a c
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary...
CVE-2026-114198
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a c
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write...
CVE-2026-114109
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the script
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete...
CVE-2026-114110
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by suppl
sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE...
CVE-2026-114111
sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve...
CVE-2026-114112
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execut
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026...
CVE-2026-114113
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, C
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability...
CVE-2026-114107
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attack
Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that...
CVE-2026-114095
Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause in
Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that...
CVE-2026-114098
Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to writ
adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows...
CVE-2026-114104
adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers to bypass content val