CVE-2021-25292

An issue was discovered in Pillow before 8.1.1

published March 19, 2021

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01635 · 76.1th percentile
Published
2021-03-19T03:30Z
EPSS history
Timeline
  • 19 MAR 03:30Z
    An issue was discovered in Pillow before 8.1.1
    cvelistv5