Описание
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
Ссылки
- Release NotesThird Party Advisory
- Release NotesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.1.0 (исключая)
cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
EPSS
Процентиль: 79%
0.01867
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 8.8
ubuntu
почти 6 лет назад
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
CVSS3: 9.8
redhat
почти 6 лет назад
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
CVSS3: 8.8
debian
почти 6 лет назад
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow wh ...
CVSS3: 8.8
altlinux
больше 5 лет назад
ALT-PU-2021-1389: package `python3-module-Pillow` update to version 8.1.0-alt1
EPSS
Процентиль: 79%
0.01867
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787