Known vulnerabilities in Pillow - page 2

Software: Pillow
Software CPE: cpe:2.3:a:alex_clark_and_contributors:pillow:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pillow Pillow is affected by 53 known vulnerabilities: 14 high, 37 medium, 2 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447
CWE-94 High
No
No
10.2.0 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU83261 - Resource exhaustion
CVE-2023-44271
CWE-400 Medium
No
No
10.0.0 18.11.2023 SB2023111809
SB2023111810
SB2023111811
and 25 more
#VU69499 - Resource exhaustion
CVE-2022-45199
CWE-400 Medium
No
No
9.3.0 22.11.2022 SB2022112231
SB2022112234
SB2023011810
and 8 more
#VU69498 - Resource Management Errors
CVE-2022-45198
CWE-399 Medium
No
No
9.2.0 22.11.2022 SB2022112230
SB2022112234
SB2022121360
and 3 more
#VU69497 - Improper input validation
CVE-2022-24303
CWE-20 Medium
No
No
9.0.1 22.11.2022 SB2022112229
SB2022112234
SB2022121360
and 6 more
#VU68608 - Incorrect Regular Expression
CVE-2021-23437
CWE-185 Medium
No
No
8.3.2 24.10.2022 SB2021090323
SB2022102434
SB2022112234
and 8 more
#VU68607 - Memory corruption
CVE-2021-34552
CWE-119 High
No
No
8.3.0 24.10.2022 SB2022102431
SB2022102434
SB2022112234
and 9 more
#VU63408 - Heap-based Buffer Overflow
CVE-2022-30595
CWE-122 High
No
No
9.1.1 18.05.2022 SB2022051840
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817
CWE-749 High
No
No
9.0.0, 9.0.1 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more
#VU60002 - Out-of-bounds read
CVE-2022-22816
CWE-125 Medium
No
No
9.0.0 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 33 more
#VU60001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-22815
CWE-22 Medium
No
No
9.0.0 25.01.2022 SB2022012523
SB2022012526
SB2022102434
and 24 more
#VU52193 - Memory corruption
CWE-119 Medium
No
No
8.2.0 13.04.2021 SB2021041363
#VU52192 - Resource Management Errors
CVE-2021-28678
CWE-399 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 3 more
#VU52191 - Improper input validation
CVE-2021-28677
CWE-20 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 3 more
#VU52190 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-28676
CWE-835 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 3 more
#VU52189 - Resource Management Errors
CVE-2021-28675
CWE-399 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 3 more
#VU52188 - Out-of-bounds read
CVE-2021-25288
CWE-125 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 2 more
#VU52187 - Out-of-bounds read
CVE-2021-25287
CWE-125 Medium
No
No
8.2.0 13.04.2021 SB2021041363
SB2021051947
SB2024051101
and 2 more
#VU49385 - Memory corruption
CVE-2020-35655
CWE-119 High
No
No
8.1.0 11.01.2021 SB2021011110
SB2021011111
SB2021011252
and 4 more
#VU49384 - Out-of-bounds write
CVE-2020-35654
CWE-787 High
No
No
8.1.0 11.01.2021 SB2021011110
SB2021011111
SB2021011252
and 4 more


Showing elements 21 - 40 out of 53