Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The output image allocation must succeed while the additional per-column lookup allocation fails, after which the error path deletes image storage that later cleanup releases again. An attacker who can drive such a large Image.transform() operation under memory pressure may trigger the failure. This can crash the process and may corrupt memory. This issue is fixed in version 13.0.0.
| Vendor | Product | Versions |
|---|---|---|
| python | pillow | pip/Pillow: <= 12.3.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| fedora | fedora linux | cert_advisory | 90% |
| red hat | enterprise linux | cert_advisory | 90% |
| resf | resf rocky linux | cert_advisory | 90% |
Loading…
Updated severity from NONE to CRITICAL based on external classification; clarified affected versions include up to 12.x
Initial creation
