CVE-2021-34552 vulnerability in Python and Other Products
Published on July 13, 2021
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
Products Associated with CVE-2021-34552
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-34552 are published in these products:
Exploit Probability
EPSS
0.34%
Percentile
56.39%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.