VYPR
Moderate severityNVD Advisory· Published Jan 12, 2021· Updated Aug 4, 2024

CVE-2020-35655

CVE-2020-35655

Description

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
pillowPyPI
>= 4.3.0, < 8.1.08.1.0

Affected products

9

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.