Out of bounds read in Pillow

HIGH 7.5CVE-2021-25293 · BIT-pillow-2021-25293 · GHSA-p43w-g3c5-g5mq · Published 19/03/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
pillow PyPI	`≥ 4.3.0, < 8.1.1< 8.1.1`	`8.1.1`
pillow python	`< 8.1.1`	`8.1.1`

Description

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.

NVD description

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.