Pillow Out-of-bounds Read

높음 7.1CVE-2020-35653 · BIT-pillow-2020-35653 · GHSA-f5g8-5qq7-938w · Published 12/01/2021 · updated 17/06/2026

요약

CVE-2020-35653은(는) pillow, pillow (python)에 영향을 주는 높음 (CVSS 7.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.6%, 전체 취약점의 76.4%보다 높음.
조치: 8.1.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
pillow PyPI	`< 8.1.0`	`8.1.0`
pillow python	`< 8.1.0`	`8.1.0`

Description

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

NVD description

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

References

pillow의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free