CVE-2021-25291

Out of bounds read in Pillow

An issue was discovered in Pillow before 8.2.0. In `TiffDecode.c`, there is an out-of-bounds read in `TiffreadRGBATile` via invalid tile boundaries.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Vulnerability Details

Score

7.5

Score Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Versions

pillow < 8.2.0

Severity

High

Ecosystem

Python

Publish Date

March 29, 2021

Modified Date

October 9, 2024