PYSEC-2022-42979
At a glance
- Published
- Updated
- CVE
- CVE-2022-45198
- Aliases
- BIT-pillow-2022-45198, GHSA-m2vv-5vj5-2hm7
Description
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Affected packages
| Package | Versions |
|---|---|
| PyPI · pillow | introduced 0, fixed 11918eac0628ec8ac0812670d9838361ead2d6a4 ; introduced 0, fixed 9.2.0 |
References
- https://bugs.gentoo.org/855683 WEB
- https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 FIX
- https://github.com/python-pillow/Pillow/pull/6402 WEB
- https://github.com/python-pillow/Pillow/releases/tag/9.2.0 WEB
- https://cwe.mitre.org/data/definitions/409.html WEB
- https://github.com/advisories/GHSA-m2vv-5vj5-2hm7 ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |