CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-11-14

Last modified

2024-08-03

Affected products

• Pillow (Python)

References

• https://bugs.gentoo.org/855683
• https://cwe.mitre.org/data/definitions/409.html
• https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4
• https://github.com/python-pillow/Pillow/pull/6402
• https://github.com/python-pillow/Pillow/releases/tag/9.2.0
• https://security.gentoo.org/glsa/202211-10