CVE-2020-35654

8.8

HIGHCVSS v3

Published

January 12, 2021

CVSS v2

6.8 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

python-pillow/Pillow

GitHubPython Imaging Library (fork)

< 8.1.0NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 32, = 33NVD

fedora

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 32, = 33NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 32, = 33NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33NVD

Security Advisories

CVE-2020-35654

Description

More on this CVE