Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35719
HistoryMay 26, 2022 - 8:26 a.m.

Heap-based Buffer Overflow

2022-05-2608:26:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
pillow
heap buffer overflow
imagingtgarledecode
tgarledecode.c
input validation
maliciously crafted tga image
system crash

EPSS

0.002

Percentile

54.1%

pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system.