CVE-2021-28676

An issue was discovered in Pillow before 8.2.0

published June 2, 2021

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02501 · 84.6th percentile
Published
2021-06-02T00:00Z
EPSS history
Timeline
  • 02 JUN 00:00Z
    An issue was discovered in Pillow before 8.2.0
    cvelistv5