CRITICAL9.8

PYSEC-2022-43145

Quick fix

PYSEC-2022-43145 — pillow: upgrade to the fixed version with the command below.

pip install --upgrade 'pillow>=9.1.1'

Details

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.

Enter the version of the package you're using.

Introduced in: 9.1.0Fixed in: 9.1.1

Fixpip install --upgrade 'pillow>=9.1.1'