CVE-2022-30595
CVE-2022-30595
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
CVSS 9.8 · Critical · EPSS 2.3% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
pillow Debian:12
- Affected ranges
- ECOSYSTEM: < 9.1.1-1
Update to 9.1.1-1
pillow Debian:13
- Affected ranges
- ECOSYSTEM: < 9.1.1-1
Update to 9.1.1-1
pillow Debian:14
- Affected ranges
- ECOSYSTEM: < 9.1.1-1
Update to 9.1.1-1
pillow PyPI
- Versions
- 9.1.0
- Affected ranges
- ECOSYSTEM: ≥ 9.1.0, < 9.1.1
Update to 9.1.1