REDHAT-BUG-1321929: Medium severity Pillow Pillow vulnerability
Pillow between 2.5.0 and 3.1.1 may overflow a buffer when reading rewriting a specially crafted Jpeg2000 file.
This occurs specifically in the function j2kencodeentry, at the line: state->buffer = malloc (tilewidth tileheight components prec / 8);
If this buffer is smaller than expected, the jpeg2k encoding functions will write outside the allocation and onto the heap, corrupting memory.
Reproducer and proposed fix can be found in original bug report:
https://bugzilla.redhat.com/showbug.cgi?id=1321422
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1321929?
The severity of REDHAT-BUG-1321929 is categorized as medium (4).
How do I fix REDHAT-BUG-1321929?
To fix REDHAT-BUG-1321929, update the Pillow library to a version above 3.1.1.
What versions of Pillow are affected by REDHAT-BUG-1321929?
Pillow versions 2.5.0 to 3.1.1 are affected by REDHAT-BUG-1321929.
What type of vulnerability is REDHAT-BUG-1321929?
REDHAT-BUG-1321929 is a buffer overflow vulnerability that occurs when processing a specially crafted Jpeg2000 file.
In which function does REDHAT-BUG-1321929 occur?
REDHAT-BUG-1321929 occurs in the function j2k_encode_entry.