Known vulnerabilities in python-pillow
Vendor:
openEuler
Software:
python-pillow
Software CPE:
cpe:2.3:o:openeuler:python-pillow:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
35
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137009 - Resource exhaustion CVE-2026-59200 |
CWE-400 | Medium | 9.0.1-12, 10.3.0-8, 10.3.0-13 | 07.07.2026 |
SB2026070342 SB2026071741 SB2026072428 and 8 more |
||
| #VU137007 - Allocation of Resources Without Limits or Throttling CVE-2026-59204 |
CWE-770 | Medium | 9.0.1-12, 10.3.0-8 | 07.07.2026 |
SB2026070342 SB2026071741 SB2026072516 and 8 more |
||
| #VU137006 - Out-of-bounds read CVE-2026-54058 |
CWE-125 | High | 9.0.1-16, 10.3.0-13 | 07.07.2026 |
SB2026070342 SB2026071741 SB2026071949 and 14 more |
||
| #VU137005 - Heap-based Buffer Overflow CVE-2026-59197 |
CWE-122 | High | 9.0.1-12, 10.3.0-13 | 07.07.2026 |
SB2026041113 SB2026071741 SB2026071949 and 14 more |
||
| #VU137004 - Out-of-bounds read CVE-2026-59198 |
CWE-125 | Medium | 9.0.1-16, 10.3.0-8, 10.3.0-13 | 07.07.2026 |
SB2026041113 SB2026071741 SB2026072428 and 8 more |
||
| #VU137003 - Heap-based Buffer Overflow CVE-2026-59199 |
CWE-122 | Medium | 9.0.1-16, 10.3.0-13 | 07.07.2026 |
SB2026070342 SB2026071741 SB2026072428 and 8 more |
||
| #VU137002 - Heap-based Buffer Overflow CVE-2026-59205 |
CWE-122 | Medium | 9.0.1-16, 10.3.0-13 | 07.07.2026 |
SB2026070342 SB2026071741 SB2026072428 and 8 more |
||
| #VU136860 - Uncontrolled Memory Allocation CVE-2026-55379 |
CWE-789 | Medium | 9.0.1-12, 10.3.0-8 | 03.07.2026 |
SB2026070342 SB2026070815 SB2026070816 and 16 more |
||
| #VU136859 - Uncontrolled Memory Allocation CVE-2026-54059 |
CWE-789 | Medium | 9.0.1-12, 10.3.0-8 | 03.07.2026 |
SB2026070342 SB2026070815 SB2026070816 and 16 more |
||
| #VU136858 - Uncontrolled Memory Allocation CVE-2026-54060 |
CWE-789 | Medium | 9.0.1-12, 10.3.0-8 | 03.07.2026 |
SB2026070342 SB2026070815 SB2026070816 and 16 more |
||
| #VU136857 - Uncontrolled Memory Allocation CVE-2026-55380 |
CWE-789 | Medium | 9.0.1-12, 10.3.0-8 | 03.07.2026 |
SB2026070342 SB2026070815 SB2026070816 and 16 more |
||
| #VU127176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-42310 |
CWE-835 | Medium | 9.0.1-8, 10.3.0-5 | 23.04.2026 |
SB2026041113 SB2026061950 SB2026061951 and 5 more |
||
| #VU127175 - Integer overflow CVE-2026-42308 |
CWE-190 | Medium | 9.0.1-8, 10.3.0-5 | 23.04.2026 |
SB2026041113 SB2026061950 SB2026061951 and 5 more |
||
| #VU125817 - Resource exhaustion CVE-2026-40192 |
CWE-400 | Medium | 10.3.0-3 | 11.04.2026 |
SB2026041113 SB2026041807 SB2026041808 and 9 more |
||
| #VU123113 - Out-of-bounds write CVE-2026-25990 |
CWE-787 | High | 10.3.0-2 | 20.02.2026 |
SB2026022027 SB2026022028 SB2026022035 and 12 more |
||
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 9.0.1-7 | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 9.0.1-6 | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU60003 - Exposed Dangerous Method or Function CVE-2022-22817 |
CWE-749 | High | 8.1.1-8, 9.0.1-6 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 26 more |
||
| #VU60002 - Out-of-bounds read CVE-2022-22816 |
CWE-125 | Medium | 8.1.1-8, 9.0.1-8, 9.0.1-12, 9.0.1-16, 10.3.0-3, 10.3.0-5, 10.3.0-8, 10.3.0-13 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022022226 and 33 more |
||
| #VU60001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-22815 |
CWE-22 | Medium | 8.1.1-8, 9.0.1-8, 9.0.1-12, 9.0.1-16, 10.3.0-3, 10.3.0-5, 10.3.0-8, 10.3.0-13 | 25.01.2022 |
SB2022012523 SB2022012526 SB2022102434 and 24 more |
Showing elements 1 - 20 out of 35