CVE-2021-25292

CVSS 3.1: 6.5 medium
EPSS: 2%p75
Published: Mar 19, 2021 · Mar 19, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-25292 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.

Vendors: python

Products: pillow

Weakness: CWE-1333

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news

1 story

File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help

Palo Alto Unit 42Jun 6, 12:43 UTC · Jun 6, 2024VulnerabilityCVE-2021-24144 CVE-2021-24142 CVE-2021-25277+72