Out-of-bounds read In pillow
Description
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 pypi | 12.2.0 | ||
 rpm rhel8 | - | - | |
rpm rhel8 | - | - | |
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel7 | - | - | |
rpm rhel8 | - | - | |
rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - |
1-10 of 21
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3.