Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-45199

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q4mp-jvh2-76fj

Pillow subject to DoS via SAMPLESPERPIXEL tag Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.

gitlab/pypi/Pillow/CVE-2022-45199

Pillow subject to DoS via SAMPLESPERPIXEL tag Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.

pypa/pillow/PYSEC-2022-42980

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.

pysec/PYSEC-2022-42980

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.