CVE-2021-34552

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://lists.debian.org/debian-lts-announce/2021/07/msg00018.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7V6LCG525ARIX6LX5QRYNAWVDD2MD2SV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUGBBT63VL7G4JNOEIPDJIOC34ZFBKNJ/
https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflowRelease Notes, Vendor Advisory
https://pillow.readthedocs.io/en/stable/releasenotes/index.htmlRelease Notes, Vendor Advisory
https://security.gentoo.org/glsa/202211-10Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00018.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7V6LCG525ARIX6LX5QRYNAWVDD2MD2SV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUGBBT63VL7G4JNOEIPDJIOC34ZFBKNJ/
https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflowRelease Notes, Vendor Advisory
https://pillow.readthedocs.io/en/stable/releasenotes/index.htmlRelease Notes, Vendor Advisory
https://security.gentoo.org/glsa/202211-10Third Party Advisory

Timeline

Published: Jul 13, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-345534.3Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content CVE-2021-345557.5OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a mult CVE-2021-345565.5In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store CVE-2021-345574.6XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout()CVE-2021-345586.5The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expecte CVE-2021-345595.3In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbit CVE-2021-34567.1An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions CVE-2021-345605.5In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be cap CVE-2021-345618.8In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access CVE-2021-345626.1In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.CVE-2021-345633.3In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be re CVE-2021-345645.5Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPER