Launchpad.net

CVE 2020-10177

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.

See the CVE page on Mitre.org for more details.