VDB
KO
CRITICAL 9.8

PYSEC-2022-43145

Details

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / pillow
Introduced in: 9.1.0 Fixed in: 9.1.1
Fix pip install --upgrade 'pillow>=9.1.1'

References