CVE-2022-30595: Buffer Overflow
libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
Other sources
When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow.
Opening an image with a zero or negative height has been found to bypass a decompression bomb check. This will now raise a SyntaxError instead, in turn raising a PIL.UnidentifiedImageError.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Pillow 9.1.0?
The vulnerability ID for Pillow 9.1.0 is CVE-2022-30595.
What is the severity of CVE-2022-30595?
The severity of CVE-2022-30595 is critical with a severity score of 9.8.
What is the affected software for CVE-2022-30595?
The affected software for CVE-2022-30595 is Pillow 9.1.0.
What is the description of CVE-2022-30595?
CVE-2022-30595 is a heap buffer overflow vulnerability in the processing of invalid TGA image files in Pillow 9.1.0.
How can I fix CVE-2022-30595?
To fix CVE-2022-30595, update your Pillow installation to version 9.1.1 or later.