PT-2021-6916

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 8.1.1 Description The issue is caused by a heap-based buffer overflow in the Pillow library when decoding crafted YCbCr files, potentially allowing a remote attacker to impact the confidentiality and integrity of...