Pillow Security Vulnerabilities and Issues — Pillow CVE List

Lucene search

PythonPillow

3 matches found

CVE•added 2021/01/12 9:15 a.m.•297 views

CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

7.1CVSS7.7AI score0.0038EPSS

CVE•added 2021/01/12 9:15 a.m.•224 views

CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

5.8CVSS6.8AI score0.00504EPSS

CVE•added 2021/01/12 9:15 a.m.•192 views

CVE-2020-35654

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

8.8CVSS9.2AI score0.00152EPSS