Out-of-bounds read in Pillow - CVE-2020-35653

Vulnerability identifier: #VU49383

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-35653

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when processing PCX files. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Pillow
Gentoo Linux
Arch Linux
Ubuntu
openEuler
Fedora
py3-pillow (Alpine package)
python3-pil (Ubuntu package)
python-pil (Ubuntu package)
python3-pillow-help
python-pillow-debugsource
python2-pillow
python3-pillow
python3-pillow-devel
python2-pillow-devel
python-pillow-debuginfo
python-pillow
python2-pillow-help
mingw-python-pillow

Install updates from vendor's website.

Pillow - update to 8.1.0
py3-pillow (Alpine package) - update to 8.1.0-r0
python3-pil (Ubuntu package) - addressed in versions 2.3.0-1ubuntu3.4+esm2, 3.1.2-0ubuntu1.5, 5.1.0-1ubuntu0.4, 7.0.0-4ubuntu0.2, 7.2.0-1ubuntu0.1
python-pil (Ubuntu package) - addressed in versions 2.3.0-1ubuntu3.4+esm2, 3.1.2-0ubuntu1.5, 5.1.0-1ubuntu0.4
python3-pillow-help - update to 5.3.0-11
python-pillow-debugsource - update to 5.3.0-11
python2-pillow - update to 5.3.0-11
python3-pillow - update to 5.3.0-11
python3-pillow-devel - update to 5.3.0-11
python2-pillow-devel - update to 5.3.0-11
python-pillow-debuginfo - update to 5.3.0-11
python-pillow - update to 5.3.0-11
python2-pillow-help - update to 5.3.0-11
python-pillow - addressed in versions 7.0.0-5.fc32, 7.2.0-3.fc33
mingw-python-pillow - update to 7.2.0-3.fc33

• https://security.gentoo.org/glsa/202101-08
• https://bugs.gentoo.org/763210

• Multiple vulnerabilities in Pillow
• Gentoo update for Pillow
• Arch Linux update for python-pillow
• Out-of-bounds read in py3-pillow (Alpine package)
• Ubuntu update for pillow
• Ubuntu update for pillow
• openEuler update for python-pillow
• Fedora 33 update for mingw-python-pillow, python-pillow
• Fedora 32 update for python-pillow