Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c
in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c
in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.