Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 8

Количество 8

ubuntu логотип

CVE-2026-54058

18 дней назад

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

EPSS: Низкий
redhat логотип

CVE-2026-54058

18 дней назад

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2026-54058

18 дней назад

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

EPSS: Низкий
debian логотип

CVE-2026-54058

18 дней назад

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads ...

EPSS: Низкий
github логотип

GHSA-62p4-gmf7-7g93

12 дней назад

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

EPSS: Низкий
fstec логотип

BDU:2026-09900

около 1 месяца назад

Уязвимость функции PyImaging_MapBuffer() компонента src/map.c библиотеки для работы с изображениями Pillow, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

CVSS3: 9.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3084-1

16 дней назад

Security update for python-Pillow

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3268-1

5 дней назад

Security update for python-Pillow

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-54058

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

0%
Низкий
18 дней назад
redhat логотип
CVE-2026-54058

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

CVSS3: 9.1
0%
Низкий
18 дней назад
nvd логотип
CVE-2026-54058

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.

0%
Низкий
18 дней назад
debian логотип
CVE-2026-54058

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads ...

0%
Низкий
18 дней назад
github логотип
GHSA-62p4-gmf7-7g93

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

0%
Низкий
12 дней назад
fstec логотип
BDU:2026-09900

Уязвимость функции PyImaging_MapBuffer() компонента src/map.c библиотеки для работы с изображениями Pillow, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

CVSS3: 9.1
0%
Низкий
около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3084-1

Security update for python-Pillow

16 дней назад
suse-cvrf логотип
SUSE-SU-2026:3268-1

Security update for python-Pillow

5 дней назад

Уязвимостей на страницу