Lucene search
GoogleOSV:GHSA-HF64-X4GQ-P99HHistoryMar 18, 2021 - 7:55 p.m.
Pillow Out-of-bounds Read
2021-03-1819:55:34
Google
osv.dev
17
pillow
out-of-bounds read
sgirledecode
buffer over-read
crafted sgi rle
image files
mishandled
software
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
References
github.com/python-pillow/Pillow
github.com/python-pillow/Pillow/commit/2f409261eb1228e166868f8f0b5da5cda52e55bf
github.com/python-pillow/Pillow/commit/7e95c63fa7f503f185d3d9eb16b9cee1e54d1e46
lists.fedoraproject.org/archives/list/[email protected]/message/6BYVI5G44MRIPERKYDQEL3S3YQCZTVHE
lists.fedoraproject.org/archives/list/[email protected]/message/BF553AMNNNBW7SH4IM4MNE4M6GNZQ7YD
nvd.nist.gov/vuln/detail/CVE-2020-35655
pillow.readthedocs.io/en/stable/releasenotes/index.html
Related
veracode
veracode
Denial Of Service (DoS)
2021-01-15 06:17:47
debiancve
debiancve
CVE-2020-35655
2021-01-12 09:15:13
nvd
nvd
CVE-2020-35655
2021-01-12 09:15:13
prion
prion
Buffer overflow
2021-01-12 09:15:00
osv
osv
BIT-pillow-2020-35655
2024-03-06 11:06:15
CVE-2020-35655
2021-01-12 09:15:13
PYSEC-2021-71
2021-01-12 09:15:00
github
github
Pillow Out-of-bounds Read
2021-03-18 19:55:34
ubuntucve
ubuntucve
CVE-2020-35655
2021-01-12 00:00:00
cve
cve
CVE-2020-35655
2021-01-12 09:15:13
redhatcve
redhatcve
CVE-2020-35655
2021-01-12 16:20:06
alpinelinux
alpinelinux
CVE-2020-35655
2021-01-12 09:15:13
cvelist
cvelist
CVE-2020-35655
2021-01-12 08:08:47
openvas
openvas
Ubuntu: Security Advisory (USN-4697-1)
2021-01-19 00:00:00
Fedora: Security Advisory for mingw-python-pillow (FEDORA-2021-a8ddc1ce70)
2021-01-21 00:00:00
Fedora: Security Advisory for python-pillow (FEDORA-2021-880aa7bd27)
2021-01-25 00:00:00
nessus
nessus
GLSA-202101-08 : Pillow: Multiple vulnerabilities
2021-01-12 00:00:00
Fedora 32 : python-pillow (2021-880aa7bd27)
2021-01-25 00:00:00
archlinux
archlinux
[ASA-202101-11] python-pillow: multiple issues
2021-01-12 00:00:00
gentoo
gentoo
Pillow: Multiple vulnerabilities
2021-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32
2021-01-24 01:23:46
[SECURITY] Fedora 33 Update: python-pillow-7.2.0-3.fc33
2021-01-21 01:47:29
[SECURITY] Fedora 33 Update: mingw-python-pillow-7.2.0-3.fc33
2021-01-21 01:47:28
ubuntu
ubuntu
Pillow vulnerabilities
2021-01-18 00:00:00
suse
suse
Security update for python-CairoSVG, python-Pillow (moderate)
2021-08-10 00:00:00
almalinux
almalinux
Moderate: python-pillow security update
2021-11-09 08:24:34
rocky
rocky
python-pillow security update
2021-11-09 08:24:34
redhat
redhat
(RHSA-2021:4149) Moderate: python-pillow security update
2021-11-09 08:24:34