TI-2026-42349 CVE-2026-59204 · GHSA-vjc4-5qp5-m44j
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
Priority HIGH 77
Pillow is a Python imaging library.
RHSA-2026:61628
Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Released 2026-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
Fixes 26 records
TI-2026-42350 CVE-2026-59205 · GHSA-9hw9-ch79-4vh6
Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39958 CVE-2026-55380 · GHSA-phj9-mv4w-65pm
Pillow GdImageFile decompression bomb protection bypass
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39957 CVE-2026-55379 · GHSA-45hq-cxwh-f6vc
Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb…
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-38994 CVE-2026-54060 · GHSA-5x94-69rx-g8h2
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-22899 CVE-2026-28684 · GHSA-mf9w-mj56-hr94
python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
Priority MEDIUM 64
python-dotenv reads key-value pairs from a .env file and can set them as environment variables.
TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx
wheel Allows Arbitrary File Permission Modification via Path Traversal
Priority MEDIUM 64
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.
TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29
Integer overflow in Apache Thrift
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift…
Priority MEDIUM 46
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
TI-2026-41804 CVE-2026-58049 · GHSA-mjxr-6gqf-w78h
FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
Priority MEDIUM 45
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so…
TI-2026-29006 CVE-2026-40192 · GHSA-whj4-6x5x-4v2j
Pillow is vulnerable to a FITS GZIP decompression bomb
Priority MEDIUM 45
Pillow is a Python imaging library.
TI-2026-30619 CVE-2026-42311 · GHSA-pwv6-vv43-88gr
Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
Priority MEDIUM 44
Pillow is a Python imaging library.
TI-2026-46355 CVE-2026-64830 · GHSA-jphx-q7f7-4x8r
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
Priority MEDIUM 41
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…
TI-2026-46360 CVE-2026-64835 · GHSA-p2v8-4c4f-rwpq
FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
Priority MEDIUM 40
FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying…
TI-2025-42677 CVE-2025-69223 · GHSA-6mq8-rvhq-8wgg
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37
urllib3 Streaming API improperly handles highly compressed data
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Priority LOW 36
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Priority LOW 35
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2025-32917 CVE-2025-52881 · GHSA-cgrx-mc8f-2prm
runc: LSM labels can be bypassed with malicious config using dummy procfs files
Priority LOW 35
runc is a CLI tool for spawning and running containers according to the OCI specification.
TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5
Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Priority LOW 34
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-20262 CVE-2026-25087 · GHSA-rgxp-2hwp-jwgg
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Priority LOW 33
Use After Free vulnerability in Apache Arrow C++.
TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Priority LOW 32
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p
SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.