CVE-2022-45198

Description

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• https://bugs.gentoo.org/855683
• https://cwe.mitre.org/data/definitions/409.html
• https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361e…
• https://github.com/python-pillow/Pillow/pull/6402
• https://github.com/python-pillow/Pillow/releases/tag/9.2.0
• https://security.gentoo.org/glsa/202211-10