Asymmetric denial of service In pillow
Description
Segv on unknown address in jpeg_read_scanlines OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode
Crash type: Segv on unknown address Crash state: jpeg_read_scanlines ImagingJpegDecode _decode
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 pypi |
Aliases
1. 2.
References
1.