---

CVE-2021-34552 - log back

CVE-2021-34552 edited at 13 Jul 2021 18:15:31
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Arbitrary code execution
Description	+ Pillow through 8.2.0 allows an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
References	+ https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflow + https://github.com/python-pillow/Pillow/pull/5567 + https://github.com/python-pillow/Pillow/commit/518ee3722a99d7f7d890db82a20bd81c1c0327fb
Notes

CVE-2021-34552 created at 13 Jul 2021 18:10:24