CVE-2020-10994
EUVD-2020-013225.06.2020, 19:15
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | pillow | 𝑥 < 7.1.0 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pillow |
| ||||||||||||||||||||||||||
| pillow-python2 |
| ||||||||||||||||||||||||||
| python-imaging |
|
Common Weakness Enumeration
References