Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
References
Link | Resource |
---|---|
https://bugs.gentoo.org/855683 | Issue Tracking Patch Third Party Advisory |
https://cwe.mitre.org/data/definitions/409.html | Third Party Advisory |
https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 | Patch Third Party Advisory |
https://github.com/python-pillow/Pillow/pull/6402 | Patch Third Party Advisory |
https://github.com/python-pillow/Pillow/releases/tag/9.2.0 | Release Notes Third Party Advisory |
https://security.gentoo.org/glsa/202211-10 | Third Party Advisory |
Configurations
History
10 Jan 2023, 20:11
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://bugs.gentoo.org/855683 - Issue Tracking, Patch, Third Party Advisory | |
References | (GENTOO) https://security.gentoo.org/glsa/202211-10 - Third Party Advisory |
22 Nov 2022, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Nov 2022, 16:10
Type | Values Removed | Values Added |
---|---|---|
First Time |
Python
Python pillow |
|
CPE | cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | NVD-CWE-Other | |
References | (MISC) https://cwe.mitre.org/data/definitions/409.html - Third Party Advisory | |
References | (MISC) https://github.com/python-pillow/Pillow/releases/tag/9.2.0 - Release Notes, Third Party Advisory | |
References | (MISC) https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4 - Patch, Third Party Advisory | |
References | (MISC) https://bugs.gentoo.org/855683 - Third Party Advisory | |
References | (MISC) https://github.com/python-pillow/Pillow/pull/6402 - Patch, Third Party Advisory |
14 Nov 2022, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-11-14 07:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-45198
Mitre link : CVE-2022-45198
CVE.ORG link : CVE-2022-45198
JSON object : View
Products Affected
python
- pillow
CWE