Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-54037
HistoryMar 08, 2021 - 12:00 a.m.

Pillow out-of-bounds read vulnerability (CNVD-2021-54037)

2021-03-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

EPSS

0.001

Percentile

45.6%

Pillow is a Python-based image processing library. Pillow is vulnerable to an out-of-bounds read vulnerability, which can be exploited to submit special file requests and trick users into parsing them, which can crash the application.