Количество 7
Количество 7
GHSA-9hw9-ch79-4vh6
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.
CVE-2026-59205
Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms ...
SUSE-SU-2026:3084-1
Security update for python-Pillow
SUSE-SU-2026:3268-1
Security update for python-Pillow
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9hw9-ch79-4vh6 Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch | CVSS3: 7.5 | 0% Низкий | 14 дней назад |
 | CVE-2026-59205 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0. | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
 | CVE-2026-59205 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0. | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
 | CVE-2026-59205 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0. | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| CVE-2026-59205 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms ... | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
 | SUSE-SU-2026:3084-1 Security update for python-Pillow | 18 дней назад | ||
| SUSE-SU-2026:3268-1 Security update for python-Pillow | 8 дней назад |
Уязвимостей на страницу