https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:37:03.249045+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-44271 CVE-2023-44271 2026-09-29T22:37:03.254744+00:00

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

 https://vulnerability.circl.lu/vuln/usn-6618-1 USN-6618-1 — pillow vulnerabilities 2026-09-29T22:37:03.254852+00:00

Affected: Ubuntu:20.04:LTS: pillow, Ubuntu:22.04:LTS: pillow

It was discovered that Pillow incorrectly handled certain long text arguments. An attacker could possibly use this issue to cause Pillow to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-44271)

Duarte Santos discovered that Pillow incorrectly handled the environment parameter to PIL.ImageMath.eval. An attacker could possibly use this issue to execute arbitrary code. (CVE-2023-50447)