Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-35653
7.1
HIGHCVSS v3
Published
January 12, 2021
CVSS v2
5.8 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
GitHub
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems