VDB
Sign up
—

OSV-2022-1074

Invalid-free in _dealloc

Quick fix

OSV-2022-1074 — pillow: upgrade to the fixed version with the command below.

pip install --upgrade 'pillow>=f7363c1091c70356d92e56abfca6b65bef9e7b26'

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52587

``` Crash type: Invalid-free Crash state: _dealloc _Py_DECREF frame_dealloc ```

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/pillow
Introduced in: bb2016794f1f9bf9e4726727080e1beb789823fbFixed in: f7363c1091c70356d92e56abfca6b65bef9e7b26
Fixpip install --upgrade 'pillow>=f7363c1091c70356d92e56abfca6b65bef9e7b26'

References