In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pillow(PyPI) | 0 | 7.1.0 | N/A |
CVSS Metrics