MEDIUM 5.5
GHSA-5xmw-vc9v-4wf2
Pillow has a heap buffer overflow with nested list coordinates
상세
Passing nested lists as coordinates to APIs that accept coordinates such as `ImagePath.Path`, `ImageDraw.ImageDraw.polygon` and `ImageDraw.ImageDraw.line` could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This was introduced in Pillow 11.2.1.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.