Safety vulnerability ID: 38448
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
Latest version: 11.0.0
Python Imaging Library (Fork)
Pillow before 6.2.3 and 7.x before 7.0.1 has multiple out-of-bounds reads in libImaging/FliDecode.c.
MISC:https://github.com/python-pillow/Pillow/commits/master/src/libImaging: https://github.com/python-pillow/Pillow/commits/master/src/libImaging
MISC:https://github.com/python-pillow/Pillow/pull/4503: https://github.com/python-pillow/Pillow/pull/4503
MISC:https://github.com/python-pillow/Pillow/pull/4538: https://github.com/python-pillow/Pillow/pull/4538
MISC:https://pillow.readthedocs.io/en/stable/releasenotes/6.2.3.html: https://pillow.readthedocs.io/en/stable/releasenotes/6.2.3.html
MISC:https://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html: https://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application