Known vulnerabilities in py3-pillow (Alpine package)

Vendor: Alpine Linux Development Team
Software: py3-pillow (Alpine package)
Software CPE: cpe:2.3:o:alpine:py3-pillow_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting py3-pillow (Alpine package) py3-pillow (Alpine package) is affected by 5 known vulnerabilities: 3 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49385 - Memory corruption
CVE-2020-35655		 CWE-119 High
No
No
 7.1.2-r1, 7.2.0-r1, 8.1.0-r0 11.01.2021 SB2021011110
SB2021011111
SB2021011252
and 4 more
#VU49384 - Out-of-bounds write
CVE-2020-35654		 CWE-787 High
No
No
 8.1.0-r0 11.01.2021 SB2021011110
SB2021011111
SB2021011252
and 4 more
#VU49383 - Out-of-bounds read
CVE-2020-35653		 CWE-125 Low
No
No
 8.1.0-r0 11.01.2021 SB2021011110
SB2021011111
SB2021011252
and 6 more
#VU24205 - Memory corruption
CVE-2019-19911		 CWE-119 Medium
No
No
 7.1.2-r1, 7.2.0-r1, 8.1.0-r0 13.01.2020 SB2020010305
SB2020020704
SB2020022302
and 5 more
#VU23910 - Integer overflow
CVE-2020-5310		 CWE-190 High
No
No
 7.1.2-r1, 7.2.0-r1, 8.1.0-r0 03.01.2020 SB2020010305
SB2020020704
SB2020010326
and 5 more