New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerabilide Out-of-bounds #56

Open

vinisec opened this issue Oct 14, 2021 · 0 comments

Labels

vinisec commented Oct 14, 2021

Descreva a vulnerabilidade de segurança (se houver CVE, coloque como
referência)

An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i. This dates to Pillow 2.4.0.

References
https://nvd.nist.gov/vuln/detail/CVE-2021-25288
python-pillow/Pillow#5377 (comment)
https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode
https://lists.fedoraproject.org/archives/list/[email protected]/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/

Classifique a prioridade de correção, de acordo com a severidade da
vulnerabilidade 30 dias

vinisec added the security label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment