https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:37:16.243088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pillow-cve-2020-35654 BREW-pillow-CVE-2020-35654 2026-10-07T19:37:16.302800+00:00

Affected: Homebrew: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

 https://cve.radiocsirt.org/vuln/cve-2020-35654 CVE-2020-35654 2026-10-07T19:37:16.302863+00:00

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.

 https://cve.radiocsirt.org/vuln/ghsa-vqcj-wrf2-7v73 GHSA-vqcj-wrf2-7v73 — Pillow Out-of-bounds Write 2026-10-07T19:37:16.302889+00:00

Affected: PyPI: pillow

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.