CVE-2020-5311: Buffer Overflow

January 3, 2020 (updated August 18, 2020)

libImaging/SgiRleDecode.c in Pillow has an SGI buffer overflow.

References

nvd.nist.gov/vuln/detail/CVE-2020-5311

Detect and mitigate CVE-2020-5311 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →