CVE-2021-34552 in Pillow
요약 (영어)
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2021. 06. 10.
공개
2021. 07. 13.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 178628 | Pillow/Python Imaging Library Convert.c 메모리 손상 | 120 | 정의되지 않음 | 공식 수정 | CVE-2021-34552 |