Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.
| Vendor | Product | Versions |
|---|---|---|
| python | pillow | pip/Pillow: <= 12.3.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| fedora | fedora linux | cert_advisory | 90% |
| red hat | enterprise linux | cert_advisory | 90% |
| resf | resf rocky linux | cert_advisory | 90% |
Loading…
Updated severity from NONE to MEDIUM and confirmed patchAvailable version is 13.0.0
Initial creation
