Lucene search

CVE-2020-35654

🗓️ 12 Jan 2021 09:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 189 Views

Pillow before 8.1.0, TiffDecode heap-based buffer overflow in YCbCr file

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 73
Prion	Heap overflow	12 Jan 202109:15	–	prion
Prion	Heap overflow	19 Mar 202104:15	–	prion
NVD	CVE-2020-35654	12 Jan 202109:15	–	nvd
NVD	CVE-2021-25289	19 Mar 202104:15	–	nvd
OSV	BIT-PILLOW-2020-35654	6 Mar 202411:06	–	osv
OSV	PYSEC-2021-70	12 Jan 202109:15	–	osv
OSV	UBUNTU-CVE-2020-35654	12 Jan 202109:15	–	osv
OSV	GHSA-VQCJ-WRF2-7V73 Pillow Out-of-bounds Write	18 Mar 202119:55	–	osv
OSV	CVE-2020-35654	12 Jan 202109:15	–	osv
OSV	UBUNTU-CVE-2021-25289	3 Mar 202100:00	–	osv

Nvd

Node

python pillowRange<8.1.0

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BF553AMNNNBW7SH4IM4MNE4M6GNZQ7YD/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BYVI5G44MRIPERKYDQEL3S3YQCZTVHE/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/index.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jan 2021 09:15Current

9.2High risk

Vulners AI Score9.2

CVSS26.8

CVSS38.8

EPSS0.00304

CWE-787