In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
{ "binaries": [ { "binary_name": "python-pil", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python-pil-dbg", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python-pil-doc", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python-pil.imagetk", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python-pil.imagetk-dbg", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python3-pil", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python3-pil-dbg", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python3-pil.imagetk", "binary_version": "5.1.0-1ubuntu0.4" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "5.1.0-1ubuntu0.4" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "python-pil-doc", "binary_version": "7.0.0-4ubuntu0.2" }, { "binary_name": "python3-pil", "binary_version": "7.0.0-4ubuntu0.2" }, { "binary_name": "python3-pil-dbg", "binary_version": "7.0.0-4ubuntu0.2" }, { "binary_name": "python3-pil.imagetk", "binary_version": "7.0.0-4ubuntu0.2" }, { "binary_name": "python3-pil.imagetk-dbg", "binary_version": "7.0.0-4ubuntu0.2" } ], "availability": "No subscription required" }