Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
References
| Link | Resource |
|---|---|
| https://bugs.gentoo.org/855683 | Issue Tracking Patch Third Party Advisory |
| https://cwe.mitre.org/data/definitions/409.html | Third Party Advisory |
| https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 | Patch Third Party Advisory |
| https://github.com/python-pillow/Pillow/pull/6402 | Patch Third Party Advisory |
| https://github.com/python-pillow/Pillow/releases/tag/9.2.0 | Release Notes Third Party Advisory |
| https://security.gentoo.org/glsa/202211-10 | Third Party Advisory |
| https://bugs.gentoo.org/855683 | Issue Tracking Patch Third Party Advisory |
| https://cwe.mitre.org/data/definitions/409.html | Third Party Advisory |
| https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 | Patch Third Party Advisory |
| https://github.com/python-pillow/Pillow/pull/6402 | Patch Third Party Advisory |
| https://github.com/python-pillow/Pillow/releases/tag/9.2.0 | Release Notes Third Party Advisory |
| https://security.gentoo.org/glsa/202211-10 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.gentoo.org/855683 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://cwe.mitre.org/data/definitions/409.html - Third Party Advisory | |
| References | () https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 - Patch, Third Party Advisory | |
| References | () https://github.com/python-pillow/Pillow/pull/6402 - Patch, Third Party Advisory | |
| References | () https://github.com/python-pillow/Pillow/releases/tag/9.2.0 - Release Notes, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202211-10 - Third Party Advisory |
Information
Published : 2022-11-14 07:15
Updated : 2024-11-21 07:28
NVD link : CVE-2022-45198
Mitre link : CVE-2022-45198
CVE.ORG link : CVE-2022-45198
JSON object : View
Products Affected
python
- pillow
CWE