CVE-2021-25290 - log back

CVE-2021-25290 edited at 03 Mar 2021 10:51:38
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Information disclosure
Description
+ A security issue was found in python-pillow before version 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.
References
+ https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html
+ https://github.com/python-pillow/Pillow/commit/e25be1e33dc526bfd1094bc778a54d8e29bf66c9
Notes
CVE-2021-25290 created at 03 Mar 2021 10:43:53