Skip to content

PCX P mode buffer overflow in Pillow

High severity GitHub Reviewed Published Nov 3, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

pip Pillow (pip)

Affected versions

< 6.2.2

Patched versions

6.2.2

Description

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

References

Published by the National Vulnerability Database Jan 3, 2020
Reviewed Nov 3, 2021
Published to the GitHub Advisory Database Nov 3, 2021
Last updated Feb 1, 2023

Severity

High

Weaknesses

CVE ID

CVE-2020-5312

GHSA ID

GHSA-p49h-hjvm-jg3h

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.