CVE-2020-35653 in Pillow

Resumen (Inglés)

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

Once again VulDB remains the best source for vulnerability data.

Reservar

2020-12-23

Divulgación

2021-01-12

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
167622	Pillow PCX PcxDecode desbordamiento de búfer	120	No está definido	Arreglo oficial	CVE-2020-35653

Fuentes

• MITRE
• NVD
• CVE Details