En bref
- CVE-2019-16865 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant pillow, pillow (python).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.1%, plus élevée que 87.9% des vulnérabilités.
- Correctif : mettre à jour vers 6.2.0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| pillow PyPI | < 6.2.0
| 6.2.0
|
| pillow | < 6.2.0
| 6.2.0
|
Description
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
NVD description
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free