Security Advisory

CVE-2020-35654

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-12 08:06:55
Last updated 2024-08-04 17:09:14
Assigner mitre
State PUBLISHED

Description

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.