4 matches found
GHSA-57H3-9RGR-C24M Out of bounds write in Pillow
An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...
9.8CVSS7.1AI score0.02281EPSS
SaveExploits0References8
20