VDB
KO

PYSEC-2021-36

Details

An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / pillow
Introduced in: 0 Fixed in: 8.1.1
Fix pip install --upgrade 'pillow>=8.1.1'

References