libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
{ "github_reviewed_at": "2021-11-03T17:28:10Z", "cwe_ids": [ "CWE-120" ], "nvd_published_at": "2020-01-03T01:15:00Z", "severity": "CRITICAL", "github_reviewed": true }