Lucene search

Out-of-bounds Read in Pillow

🗓️ 08 Jun 2021 18:02:49Reported by GitHub Advisory DatabaseType

Out-of-bounds read in Pillow before 8.2.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 60
AlpineLinux	CVE-2021-25287	2 Jun 202116:15	–	alpinelinux
RedhatCVE	CVE-2021-25287	11 May 202120:55	–	redhatcve
Veracode	Denial Of Service (DoS)	3 Jun 202109:21	–	veracode
NVD	CVE-2021-25287	2 Jun 202116:15	–	nvd
CNVD	Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-43528)	3 Jun 202100:00	–	cnvd
Cvelist	CVE-2021-25287	2 Jun 202115:13	–	cvelist
Prion	Out-of-bounds	2 Jun 202116:15	–	prion
Debian CVE	CVE-2021-25287	2 Jun 202116:15	–	debiancve
F5 Networks	K45452200 : Python-Pillow vulnerability CVE-2021-25287	14 Jul 202100:00	–	f5
CVE	CVE-2021-25287	2 Jun 202116:15	–	cve

Vulners

Node

python pillowRange2.4.0–8.2.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-25287
github	www.github.com/python-pillow/Pillow/pull/5377
github	www.github.com/python-pillow/Pillow/pull/5377/commits/3bf5eddb89afdf690eceaa52bc4d3546ba9a5f87
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html
security	www.security.gentoo.org/glsa/202107-33
github	www.github.com/python-pillow/Pillow/commit/3bf5eddb89afdf690eceaa52bc4d3546ba9a5f87
github	www.github.com/advisories/GHSA-77gc-v2xv-rvvh
github	www.github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-137.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Jun 2021 18:49Current

2.1Low risk

Vulners AI Score2.1

CVSS26.4

CVSS39.1

EPSS0.0042

CWE-125

pillow vulnerability j2kdecode software