In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pillow | Python | * | 7.1.0 (excluding) |
Red Hat Quay 3 | RedHat | quay/clair-rhel8:v3.4.0-25 | * |
Red Hat Quay 3 | RedHat | quay/quay-bridge-operator-bundle:v3.4.0-3 | * |
Red Hat Quay 3 | RedHat | quay/quay-bridge-operator-rhel8:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-builder-qemu-rhcos-rhel8:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-builder-rhel8:v3.4.0-18 | * |
Red Hat Quay 3 | RedHat | quay/quay-container-security-operator-bundle:v3.4.0-2 | * |
Red Hat Quay 3 | RedHat | quay/quay-container-security-operator-rhel8:v3.4.0-2 | * |
Red Hat Quay 3 | RedHat | quay/quay-openshift-bridge-rhel8-operator:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-operator-bundle:v3.4.0-89 | * |
Red Hat Quay 3 | RedHat | quay/quay-operator-rhel8:v3.4.0-132 | * |
Red Hat Quay 3 | RedHat | quay/quay-rhel8:v3.4.0-51 | * |
Pillow | Ubuntu | bionic | * |
Pillow | Ubuntu | eoan | * |
Pillow | Ubuntu | esm-infra/bionic | * |
Pillow | Ubuntu | esm-infra/focal | * |
Pillow | Ubuntu | esm-infra/xenial | * |
Pillow | Ubuntu | focal | * |
Pillow | Ubuntu | trusty | * |
Pillow | Ubuntu | upstream | * |
Pillow | Ubuntu | xenial | * |
Pillow-python2 | Ubuntu | focal | * |
Pillow-python2 | Ubuntu | groovy | * |
Python-imaging | Ubuntu | precise/esm | * |