CVE-2020-10378 — Out-of-bounds Read in Pillow
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 45.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 25
Latest updateNov 3
Description
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6
Affected Packages3 packages
Also affects: Fedora 31, 32, Ubuntu Linux 16.04, 18.04, 20.04
Patches
🔴Vulnerability Details
4📋Vendor Advisories
4💬Community
3Bugzilla▶
CVE-2020-10378 python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files↗2020-07-01
Bugzilla▶
CVE-2020-10378 python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files [fedora-31]↗2020-07-01
Bugzilla▶
CVE-2020-10378 python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files [fedora-32]↗2020-07-01