In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
{ "urgency": "not yet assigned" }