CVE-2021-28676

Published: Jun 2, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28676-fix-fli-dos

https://github.com/python-pillow/Pillow/pull/5377

FEDORA-2021-77756994ba

vendor-advisory

GLSA-202107-33

vendor-advisory

[debian-lts-announce] 20210722 [SECURITY] [DLA 2716-1] pillow security update

mailing-list

https://github.com/python-pillow/Pillow/commit/bb6c11fb889e6c11b0ee122b828132ee763b5856

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-28676

Description

Affected Products

References