CVE-2020-10378
25.06.2020, 19:15
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.Enginsight
| Vendor | Product | Version |
|---|---|---|
| python | pillow | 𝑥 < 7.1.0 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 20.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pillow |
| ||||||||||||||||||||||||||
| pillow-python2 |
| ||||||||||||||||||||||||||
| python-imaging |
|
Common Weakness Enumeration
References