Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-28678
HistoryJun 02, 2021 - 4:15 p.m.

Design/Logic Flaw

2021-06-0216:15:00
PRIOn knowledge base
www.prio-n.com
11

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.

CPENameOperatorVersion
fedoraeq33
pillowlt8.2.0