CVE-2022-45198

Advisory

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). See CVE-2022-45198.


MISC:https://bugs.gentoo.org/855683: https://bugs.gentoo.org/855683
MISC:https://cwe.mitre.org/data/definitions/409.html: https://cwe.mitre.org/data/definitions/409.html
MISC:https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4: https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4
MISC:https://github.com/python-pillow/Pillow/pull/6402: https://github.com/python-pillow/Pillow/pull/6402
MISC:https://github.com/python-pillow/Pillow/releases/tag/9.2.0: https://github.com/python-pillow/Pillow/releases/tag/9.2.0

Resources

• https://bugs.gentoo.org/855683
• https://cwe.mitre.org/data/definitions/409.html
• https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4
• https://github.com/python-pillow/Pillow/pull/6402
• https://github.com/python-pillow/Pillow/releases/tag/9.2.0
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45198
• https://security.gentoo.org/glsa/202211-10