CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2014-1912Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to exe… | Python · Python | Likely | – | 27% | 2014-02-28 |
| CVE-2016-5636Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecifie… | Python · Python | Likely | – | 25% | 2016-09-02 |
| CVE-2021-3177Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-po… | Python · Python | Likely | 9.8 | 24% | 2021-01-19 |
| CVE-2008-1721Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers i… | Python · Python | Likely | – | 23% | 2008-04-10 |
| CVE-2008-4864Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary c… | Python · Python | Likely | – | 21% | 2008-10-31 |
| CVE-2019-5010An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL poi… | Python · Python | Likely | 5.9 | 21% | 2019-10-31 |
| CVE-2010-2089The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a deni… | Python · Python | Likely | – | 15% | 2010-05-27 |
| CVE-2007-2052Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allo… | Python · Python | Likely | – | 14% | 2007-04-16 |
| CVE-2007-4965Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain… | Python · Python | Likely | – | 14% | 2007-09-18 |
| CVE-2018-14647Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by cons… | The Python Project · Python | Likely | 5.3 | 11% | 2018-09-25 |
| CVE-2017-1000158CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possib… | Python · Python | Possible | – | 7.9% | 2017-11-17 |
| CVE-2016-4009Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values o… | Python · Pillow | Possible | – | 7.9% | 2016-04-13 |
| CVE-2014-4616Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process… | Python · Python | Possible | – | 7.8% | 2017-08-24 |
| CVE-2008-1887Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStri… | Python · Python | Possible | – | 6.3% | 2008-04-18 |
| CVE-2018-20406Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cau… | Python · Python | Possible | – | 5.8% | 2018-12-23 |
| CVE-2004-0150Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that i… | Python · Python | Possible | – | 5.1% | 2004-09-01 |
| CVE-2010-1450Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that… | Python · Python | Possible | – | 4.9% | 2010-05-27 |
| CVE-2010-1449Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE… | Python · Python | Possible | – | 4.9% | 2010-05-27 |
| CVE-2020-10735A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,0… | Python · python | Possible | 6.2 | 4.5% | 2022-09-09 |
| CVE-2008-3142Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact vi… | Python · Python | Possible | – | 4.5% | 2008-08-01 |
| CVE-2009-4134Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W)… | Python · Python | Possible | – | 4.4% | 2010-05-27 |
| CVE-2008-2315Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject,… | Python · Python | Possible | – | 4.4% | 2008-08-01 |
| CVE-2008-3144Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory… | Python · Python | Possible | – | 4.2% | 2008-08-01 |
| CVE-2010-1634Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) v… | Python · Python | Possible | – | 4.2% | 2010-05-27 |
| CVE-2008-1679Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via craft… | Python · Python | Possible | – | 4.1% | 2008-04-21 |
| CVE-2020-5311libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. | Python · Pillow | Possible | – | 4.0% | 2020-01-03 |
| CVE-2016-2533Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial… | Python · Pillow | Possible | – | 4.0% | 2016-04-13 |
| CVE-2020-5312libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. | Python · Pillow | Possible | – | 3.7% | 2020-01-03 |
| CVE-2019-19275typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execu… | Python · Typed Ast | Possible | – | 3.3% | 2019-11-26 |
| CVE-2019-19274typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily… | Python · Typed Ast | Possible | – | 3.3% | 2019-11-26 |
| CVE-2021-23437Regular Expression Denial of Service (ReDoS) | Python · Pillow | Possible | 7.5 | 3.2% | 2021-09-03 |
| CVE-2021-34552Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overfl… | Python · Pillow | Possible | – | 3.2% | 2021-07-13 |
| CVE-2008-3143Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _st… | Python · Python | Possible | – | 3.1% | 2008-08-01 |
| CVE-2021-25287An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. | Python · Pillow | Possible | – | 2.9% | 2021-06-02 |
| CVE-2022-22815path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. | Python · Pillow | Possible | – | 2.8% | 2022-01-07 |
| CVE-2016-0740Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. | Python · Pillow | Possible | – | 2.7% | 2016-04-13 |
| CVE-2020-5313libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. | Python · Pillow | Possible | – | 2.6% | 2020-01-03 |
| CVE-2016-3076Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jp… | Python · Pillow | Possible | – | 2.6% | 2017-04-24 |
| CVE-2016-0775Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI fi… | Python · Pillow | Possible | – | 2.5% | 2016-04-13 |
| CVE-2020-11538In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311. | Python · Pillow | Possible | – | 2.5% | 2020-06-25 |
| CVE-2021-25288An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i. | Python · Pillow | Possible | – | 2.4% | 2021-06-02 |
| CVE-2021-25290An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size. | Python · Pillow | Possible | – | 2.4% | 2021-03-19 |
| CVE-2021-25289An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibT… | Python · Pillow | Possible | – | 2.3% | 2021-03-19 |
| CVE-2022-30595libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files. | Python · Pillow | Possible | – | 2.3% | 2022-05-25 |
| CVE-2019-19911There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Win… | Python · Pillow | Possible | – | 2.2% | 2020-01-05 |
| CVE-2022-22816path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. | Python · Pillow | Possible | – | 2.1% | 2022-01-07 |
| CVE-2020-5310libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc. | Python · Pillow | Possible | – | 2.0% | 2020-01-03 |
| CVE-2016-9189Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting… | Python · Pillow | Possible | – | 1.9% | 2016-11-04 |
| CVE-2020-35654In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. | Python · Pillow | Possible | – | 1.9% | 2021-01-12 |
| CVE-2020-35655In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled. | Python · Pillow | Possible | – | 1.7% | 2021-01-12 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.