GHSA-q4mp-jvh2-76fj

Pillow subject to DoS via SAMPLESPERPIXEL tag

Source: GitHub Advisory Database (reviewed) High CVE-2022-45199

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	pillow	>= 9.2.0, < 9.3.0	9.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-45199 advisory
https://github.com/python-pillow/Pillow/pull/6700 web
https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3 web
https://bugs.gentoo.org/878769 web
https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-42980.yaml web
https://github.com/python-pillow/Pillow package
https://github.com/python-pillow/Pillow/releases/tag/9.3.0 web
https://security.gentoo.org/glsa/202211-10 web