CVE-2020-35655 — Out-of-bounds Read in Pillow

CWE-125 — Out-of-bounds Read9 documents7 sources
Severity
5.4MEDIUMNVD
OSV7.1
EPSS
0.3%
top 49.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Python PillowFedoraproject Fedora
Timeline
PublishedJan 12
Latest updateMar 18

Description

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:LExploitability: 2.8 | Impact: 2.5

Affected Packages4 packages

▶NVDpython/pillow4.3.0 — 8.1.0
▶PyPIpython/pillow4.3.0 — 8.1.0
▶Debianpython/pillow< 8.1.0-1+3
▶Ubuntupython/pillow< 3.1.2-0ubuntu1.5+2

Also affects: Fedora 32, 33

🔴Vulnerability Details

5
GHSA
Pillow Out-of-bounds Read↗2021-03-18
▶
OSV
Pillow Out-of-bounds Read↗2021-03-18
▶
OSV
pillow vulnerabilities↗2021-01-18
▶
OSV
CVE-2020-35655: In Pillow before 8↗2021-01-12
▶
CVEList
CVE-2020-35655: In Pillow before 8↗2021-01-12
▶

📋Vendor Advisories

3
Ubuntu
Pillow vulnerabilities↗2021-01-18
▶
Red Hat
python-pillow: Buffer over-read in SGI RLE image reader↗2021-01-03
▶
Debian
CVE-2020-35655: pillow - In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding...↗2020
▶
CVE-2020-35655 — Out-of-bounds Read in Python Pillow | cvebase