Skip to content
OpenAdvisories

Vendor

bigcat88

1 known vulnerabilities.

Products

pillow_heif 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-28231

    pillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read

    pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in the encode path buffer validation of `_pillow_heif.c` allows an attacker to bypass bounds checks by providing large image dimens…

    bigcat88 pillow_heif pillow-heif pi-heif PyPI