https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:30:01 +0000 https://vulnerability.circl.lu/vuln/cve-2021-25287 <p>An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.</p> <p>An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.</p> https://vulnerability.circl.lu/vuln/cve-2021-25287 https://vulnerability.circl.lu/vuln/usn-4963-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled certain image files. If a user or automated system were tricked into opening a specially-crafted file, a remote attacker could cause Pillow to crash or hand, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow</p> <p>It was discovered that Pillow incorrectly handled certain image files. If a user or automated system were tricked into opening a specially-crafted file, a remote attacker could cause Pillow to crash or hand, resulting in a denial of service.</p> https://vulnerability.circl.lu/vuln/usn-4963-1