CVE-2020-35654

Description

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading

Vulnerability Details

Score

Score Vector

Affected Versions

pillow < 8.1.0

Severity

Ecosystem

Python

Publish Date

January 12, 2021

Modified Date

December 5, 2023