CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer…

published January 12, 2021

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01640 · 76.2th percentile
Published
2021-01-12T08:02Z
EPSS history
Timeline
  • 12 JAN 08:02Z
    In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer…
    cvelistv5