Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-54029
HistoryJun 04, 2021 - 12:00 a.m.

Pillow Denial of Service Vulnerability (CNVD-2021-54029)

2021-06-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

0.001 Low

EPSS

Percentile

32.8%

Pillow is a Python-based image processing library. A denial of service vulnerability exists in versions of Pillow prior to 8.2.0. The vulnerability stems from the fact that for BLP data, the BlpImagePlugin does not properly check the data returned by the read, and an attacker could exploit this vulnerability to cause a denial of service.

CPENameOperatorVersion
pillow pillowlt8.2.0