Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4235
HistoryMay 16, 2017 - 3:23 a.m.

Integer Overflow

2017-05-1603:23:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

0.015 Low

EPSS

Percentile

86.9%

Pillow is vulnerable to integer overflow. A malicious user can pass an image file to the application to cause an integer overflow when resampling it. This can result in a heap-based buffer overflow that can have multiple impacts.

CPENameOperatorVersion
pillowle3.1.0