CVE-2020-10994

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file

published June 25, 2020

CVSS
—
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01432 · 72.8th percentile
Published
2020-06-25T18:26Z
EPSS history
Timeline
  • 25 JUN 18:26Z
    In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file
    cvelistv5