Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 11

Количество 11

fstec логотип

BDU:2026-11288

2 месяца назад

Уязвимость функции ImageFilter.RankFilter.filter библиотеки для работы с изображениями Pillow, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации

CVSS3: 8.2
EPSS: Низкий
ubuntu логотип

CVE-2026-59197

2 месяца назад

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
EPSS: Низкий
redhat логотип

CVE-2026-59197

2 месяца назад

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
EPSS: Низкий
nvd логотип

CVE-2026-59197

2 месяца назад

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
EPSS: Низкий
debian логотип

CVE-2026-59197

2 месяца назад

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public r ...

CVSS3: 8.2
EPSS: Низкий
github логотип

GHSA-xj96-63gp-2gmr

2 месяца назад

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

CVSS3: 8.2
EPSS: Низкий
rocky логотип

RLSA-2026:48021

около 2 месяцев назад

Important: python-pillow security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-48021

около 2 месяцев назад

ELSA-2026-48021: python-pillow security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21544-1

около 1 месяца назад

Security update for python-Pillow

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3084-1

2 месяца назад

Security update for python-Pillow

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3268-1

около 2 месяцев назад

Security update for python-Pillow

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2026-11288

Уязвимость функции ImageFilter.RankFilter.filter библиотеки для работы с изображениями Pillow, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации

CVSS3: 8.2
0%
Низкий
2 месяца назад
ubuntu логотип
CVE-2026-59197

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
0%
Низкий
2 месяца назад
redhat логотип
CVE-2026-59197

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
0%
Низкий
2 месяца назад
nvd логотип
CVE-2026-59197

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.

CVSS3: 8.2
0%
Низкий
2 месяца назад
debian логотип
CVE-2026-59197

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public r ...

CVSS3: 8.2
0%
Низкий
2 месяца назад
github логотип
GHSA-xj96-63gp-2gmr

Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`

CVSS3: 8.2
0%
Низкий
2 месяца назад
rocky логотип
RLSA-2026:48021

Important: python-pillow security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-48021

ELSA-2026-48021: python-pillow security update (IMPORTANT)

около 2 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:21544-1

Security update for python-Pillow

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3084-1

Security update for python-Pillow

2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3268-1

Security update for python-Pillow

около 2 месяцев назад

Уязвимостей на страницу