CVE-2020-35653
12.01.2021, 09:15
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.Enginsight
| Vendor | Product | Version |
|---|---|---|
| python | pillow | 𝑥 < 8.1.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pillow |
| ||||||||||||||||||||||||
| pillow-python2 |
| ||||||||||||||||||||||||
| python-imaging |
|
Common Weakness Enumeration
References