logo

Database

Out-of-bounds read In pillow

Description

Out-of-bounds Read in Pillow An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-252872. NVD-2021-252873. OSV-2021-252874. OSV-DEBIAN-2021-252875. OSV-ALPINE-2021-252876. GHSA-77gc-v2xv-rvvh7. GCVE-2021-252878. security.gentoo.org9. SECURITY-TRACKER-CVE-2021-2528710. SECURITY-CVE-2021-25287

References

1. https://github.com/python-pillow/Pillow/pull/5377#issuecomment-8338214702. https://github.com/python-pillow/Pillow/pull/5377/commits/3bf5eddb89afdf690eceaa52bc4d3546ba9a5f873. https://github.com/python-pillow/Pillow/commit/3bf5eddb89afdf690eceaa52bc4d3546ba9a5f874. https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-137.yaml5. https://lists.fedoraproject.org/archives/list/[email protected]/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL6. https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-FGFDM – Vulnerability | Fluid Attacks Database