libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
{ "urgency": "not yet assigned" }