Lucene search

K
osvGoogleOSV:BIT-PILLOW-2021-25288
HistoryMar 06, 2024 - 11:05 a.m.

BIT-pillow-2021-25288

2024-03-0611:05:12
Google
osv.dev
7
pillow vulnerability
out-of-bounds read
j2kdecode
j2ku_gray_i
software vulnerability

9.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

71.8%

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.

CPENameOperatorVersion
pillowlt8.2.0