{
  "id":"CVE-2021-34552",
  "details":"Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.",
  "affected":[
    {
      "package":{
        "name":"py3-pillow",
        "ecosystem":"Alpine:v3.15",
        "purl":"pkg:alpine/py3-pillow"
      },
      "ranges":[
        {
          "type":"ECOSYSTEM",
          "events":[
            {
              "introduced":"0"
            },
            {
              "fixed":"8.3.0-r0"
            }
          ]
        }
      ]
    }
  ],
  "references":[
    {
      "type":"WEB",
      "url":"https://pillow.readthedocs.io/en/stable/releasenotes/index.html"
    },
    {
      "type":"ADVISORY",
      "url":"https://pillow.readthedocs.io/en/stable/releasenotes/index.html"
    },
    {
      "type":"WEB",
      "url":"https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflow"
    },
    {
      "type":"ADVISORY",
      "url":"https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html#buffer-overflow"
    },
    {
      "type":"ARTICLE",
      "url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html"
    },
    {
      "type":"WEB",
      "url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html"
    },
    {
      "type":"ARTICLE",
      "url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7V6LCG525ARIX6LX5QRYNAWVDD2MD2SV/"
    },
    {
      "type":"WEB",
      "url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7V6LCG525ARIX6LX5QRYNAWVDD2MD2SV/"
    },
    {
      "type":"ARTICLE",
      "url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUGBBT63VL7G4JNOEIPDJIOC34ZFBKNJ/"
    },
    {
      "type":"WEB",
      "url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUGBBT63VL7G4JNOEIPDJIOC34ZFBKNJ/"
    },
    {
      "type":"ADVISORY",
      "url":"https://security.gentoo.org/glsa/202211-10"
    }
  ],
  "modified":"2022-11-22T06:15:00Z",
  "published":"2021-07-13T17:15:00Z"
}