logo

Database

Out-of-bounds read In pillow

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2020-356532. NVD-2020-356533. OSV-2020-356534. OSV-ALPINE-2020-356535. OSV-DEBIAN-2020-356536. GHSA-f5g8-5qq7-938w7. GCVE-2020-356538. lists.debian.org9. SECURITY-CVE-2020-3565310. SECURITY-TRACKER-CVE-2020-35653

References

1. https://github.com/python-pillow/Pillow/commit/2f409261eb1228e166868f8f0b5da5cda52e55bf2. https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2021-69.yaml3. https://lists.fedoraproject.org/archives/list/[email protected]/message/6BYVI5G44MRIPERKYDQEL3S3YQCZTVHE4. https://lists.fedoraproject.org/archives/list/[email protected]/message/BF553AMNNNBW7SH4IM4MNE4M6GNZQ7YD5. https://pillow.readthedocs.io/en/stable/releasenotes/index.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.