Bug 2042511 (CVE-2022-22815) - CVE-2022-22815 python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c
Summary: CVE-2022-22815 python-pillow: improperly initializes ImagePath.Path in path_g...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2022-22815
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2042514 2042512 2042513 2048363 2048375
Blocks: 2042533
TreeView+ depends on / blocked
 
Reported: 2022-01-19 16:17 UTC by Guilherme de Almeida Suckevicz
Modified: 2022-05-06 08:25 UTC (History)
10 users (show)

Fixed In Version: Pillow 9.0.0
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to improperly initializing the ImagePath. This flaw allows an attacker to access unauthorized memory that causes memory access errors, incorrect results, or crashes.
Clone Of:
Environment:
Last Closed: 2022-05-06 03:15:19 UTC


Attachments (Terms of Use)

Description Guilherme de Almeida Suckevicz 2022-01-19 16:17:16 UTC
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

References:
https://github.com/python-pillow/Pillow/blob/c5d9223a8b5e9295d15b5a9b1ef1dae44c8499f3/src/path.c#L331
https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling

Comment 1 Guilherme de Almeida Suckevicz 2022-01-19 16:17:37 UTC
Created mingw-python-pillow tracking bugs for this issue:

Affects: fedora-all [bug 2042512]


Created python-pillow tracking bugs for this issue:

Affects: fedora-all [bug 2042513]


Created python3-pillow tracking bugs for this issue:

Affects: epel-7 [bug 2042514]

Comment 10 Product Security DevOps Team 2022-05-06 03:15:16 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-22815


Note You need to log in before you can comment on or make changes to this bug.