Pillow Buffer Overflow Vulnerability (CNVD-2022-66671)

Pillow, a Python-based image processing library, is vulnerable to a buffer overflow vulnerability in Pillow version 9.1.0, which stems from a boundary error when processing TGA files. A remote attacker could exploit this vulnerability to pass specially designed data to the application, trigger a heap-based buffer overflow, and execute arbitrary code on the target system.