Known vulnerabilities in pillow (Debian package)
Vendor:
Debian
Software:
pillow (Debian package)
Software CPE:
cpe:2.3:o:debian:pillow_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
13
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
11.1.0-5+deb13u3
11.1.0-5+deb13u2
11.1.0-5+deb13u1
4.0.0-4+deb9u2
4.0.0-4+deb9u3
4.0.0-4+deb9u4
5.4.1-2+deb10u4
5.4.1-2+deb10u5
5.4.1-2+deb10u6
8.1.0-1
8.1.1-1
8.1.2-1
8.1.2+dfsg-0.1
8.1.2+dfsg-0.2
8.1.2+dfsg-0.3
8.1.2+dfsg-1
8.2.0-1
8.3.2-1
8.4.0-1
9.0.0-1
9.0.1-1
9.1.0-1
9.1.1-1
9.2.0-1
9.2.0-1.1
9.3.0-1
9.4.0-1
9.4.0-1.1
9.5.0-1
10.0.0-1
10.1.0-1
10.2.0-1
10.3.0-1
10.3.0-2
10.4.0-1
10.4.0-1.1
11.1.0-1
11.1.0-2
11.1.0-3
11.1.0-4
11.1.0-5
11.2.1-1
9.4.0-1.1+deb12u1
8.1.2+dfsg-0.3+deb11u2
8.1.2+dfsg-0.3+deb11u1
5.4.1-2+deb10u3
8.0.1
8.0.1-1
8.0.0
8.0.0-1
7.2.0
7.2.0-1
5.4.1-2+deb10u2
7.0.0
6.2.1
5.4.1
4.0.0
2.6.1
4.0.0-4+deb9u1
5.4.1-2+deb10u1
7.0.0-3
7.0.0-4
2.6.1-2+deb8u4
6.2.0-1
6.2.1-1
6.2.1-2
7.0.0-1
7.0.0-2
6.1.0-1
5.4.1-1
5.4.1-2
6.0.0-1
2.2.1-3.1
2.6.0-1.1
3.2.0-2~bpo8+1
3.3.1-1~bpo8+1
5.2.0-1
5.2.0-2
5.3.0-1
5.1.0-1
5.0.0-1
4.3.0-2
4.3.0-1
4.2.1-1
4.1.1-3
2.6.1-2+deb8u1
2.6.1-2+deb8u2
2.6.1-2+deb8u3
2.6.1-2
3.4.2-1~bpo8+1
2.2.1-1
2.2.1-2
2.2.1-3
2.3.0-1
2.3.0-2
2.4.0-1
2.4.0-2
2.5.1-1
2.5.1-2
2.5.1-3
2.5.1-4
2.5.1-5
2.5.1-6
2.5.3-1
2.6.0~rc1-1
2.6.0-1
2.6.1-1
2.7.0-1
2.8.1-1
2.9.0-1
3.0.0-1
3.1.0-1
3.1.1-1
3.2.0-1
3.2.0-2
3.3.0-1
3.3.1-1
3.4.2-1
4.0.0-1
4.0.0-2
4.0.0-3
4.0.0-4
4.1.1-1
4.1.1-2
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125817 - Resource exhaustion CVE-2026-40192 |
CWE-400 | Medium | 11.1.0-5+deb13u2 | 11.04.2026 |
SB2026041113 SB2026041807 SB2026041808 and 8 more |
||
| #VU123113 - Out-of-bounds write CVE-2026-25990 |
CWE-787 | High | 11.1.0-5+deb13u1 | 20.02.2026 |
SB2026022027 SB2026022028 SB2026022035 and 12 more |
||
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 8.1.2+dfsg-0.3+deb11u2, 9.4.0-1.1+deb12u1 | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 8.1.2+dfsg-0.3+deb11u2, 9.4.0-1.1+deb12u1 | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU83261 - Resource exhaustion CVE-2023-44271 |
CWE-400 | Medium | 8.1.2+dfsg-0.3+deb11u2, 9.4.0-1.1+deb12u1 | 18.11.2023 |
SB2023111809 SB2023111810 SB2023111811 and 25 more |
||
| #VU60003 - Exposed Dangerous Method or Function CVE-2022-22817 |
CWE-749 | High | 5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 26 more |
||
| #VU60002 - Out-of-bounds read CVE-2022-22816 |
CWE-125 | Medium | 5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 33 more |
||
| #VU60001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-22815 |
CWE-22 | Medium | 5.4.1-2+deb10u3, 8.1.2+dfsg-0.3+deb11u1 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022102434 and 24 more |
||
| #VU25021 - Resource exhaustion CVE-2019-16865 |
CWE-400 | Medium | 4.0.0-4+deb9u1, 5.4.1-2+deb10u1 | 07.02.2020 |
SB2019100503 SB2020020704 SB2020022119 and 7 more |
||
| #VU24205 - Memory corruption CVE-2019-19911 |
CWE-119 | Medium | 4.0.0-4+deb9u1, 5.4.1-2+deb10u1 | 13.01.2020 |
SB2020010305 SB2020020704 SB2020022302 and 5 more |
||
| #VU23913 - Memory corruption CVE-2020-5313 |
CWE-119 | High | 4.0.0-4+deb9u1, 5.4.1-2+deb10u1 | 03.01.2020 |
SB2020010305 SB2020020704 SB2020022302 and 10 more |
||
| #VU23912 - Memory corruption CVE-2020-5312 |
CWE-119 | High | 4.0.0-4+deb9u1, 5.4.1-2+deb10u1 | 03.01.2020 |
SB2020010305 SB2020020704 SB2020022119 and 12 more |
||
| #VU23911 - Memory corruption CVE-2020-5311 |
CWE-119 | High | 4.0.0-4+deb9u1, 5.4.1-2+deb10u1 | 03.01.2020 |
SB2020010305 SB2020020704 SB2020022119 and 7 more |