libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pillow | Python | * | 6.2.2 (excluding) |
Red Hat Enterprise Linux 7 | RedHat | python-pillow-0:2.0.0-21.gitd1c6db8.el7 | * |
Red Hat Enterprise Linux 8 | RedHat | python-pillow-0:5.1.1-12.el8_2 | * |
Red Hat Quay 3 | RedHat | quay/clair-rhel8:v3.4.0-25 | * |
Red Hat Quay 3 | RedHat | quay/quay-bridge-operator-bundle:v3.4.0-3 | * |
Red Hat Quay 3 | RedHat | quay/quay-bridge-operator-rhel8:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-builder-qemu-rhcos-rhel8:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-builder-rhel8:v3.4.0-18 | * |
Red Hat Quay 3 | RedHat | quay/quay-container-security-operator-bundle:v3.4.0-2 | * |
Red Hat Quay 3 | RedHat | quay/quay-container-security-operator-rhel8:v3.4.0-2 | * |
Red Hat Quay 3 | RedHat | quay/quay-openshift-bridge-rhel8-operator:v3.4.0-17 | * |
Red Hat Quay 3 | RedHat | quay/quay-operator-bundle:v3.4.0-89 | * |
Red Hat Quay 3 | RedHat | quay/quay-operator-rhel8:v3.4.0-132 | * |
Red Hat Quay 3 | RedHat | quay/quay-rhel8:v3.4.0-51 | * |
Pillow | Ubuntu | bionic | * |
Pillow | Ubuntu | devel | * |
Pillow | Ubuntu | disco | * |
Pillow | Ubuntu | eoan | * |
Pillow | Ubuntu | esm-infra-legacy/trusty | * |
Pillow | Ubuntu | esm-infra/bionic | * |
Pillow | Ubuntu | esm-infra/xenial | * |
Pillow | Ubuntu | trusty | * |
Pillow | Ubuntu | trusty/esm | * |
Pillow | Ubuntu | upstream | * |
Pillow | Ubuntu | xenial | * |