python pillow CVE-2021-25291 is a vulnerability in Python Pillow
Published on March 19, 2021

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.

Vendor Advisory NVD


Products Associated with CVE-2021-25291

Want to know whenever a new CVE is published for Python Pillow? stack.watch will email you.

 

Exploit Probability

EPSS
0.54%
Percentile
67.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.