{"id":"CVE-2022-45198","aliases":["BIT-pillow-2022-45198","CLSA-2026-1772410256","DEBIAN-CVE-2022-45198","DLA-4462-1","EUVD-2022-0197","GHSA-m2vv-5vj5-2hm7","MGASA-2023-0164","OESA-2023-1923","PYSEC-2022-42979","ROOT-APP-PYPI-CVE-2022-45198","SUSE-SU-2024:2908-1","UBUNTU-CVE-2022-45198","USN-5777-1","USN-5777-2","openSUSE-SU-2024:0253-1"],"status":"published","title":"Pillow vulnerable to Data Amplification attack.","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01303,"percentile":0.70694,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-409"],"published":"2022-11-14T00:00:00Z","modified":"2026-11-05T06:15:10Z","fixes":[{"ecosystem":"PyPI","package":"pillow","fixed_in":["9.2.0"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"pillow","fixed_in":["9.2.0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pillow","fixed_in":["9.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pillow","fixed_in":["9.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pillow","fixed_in":["9.2.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","fixed_in":["9.0.1-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","fixed_in":["9.0.1-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-pillow","fixed_in":["9.0.1-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"python-pillow","fixed_in":["9.0.1-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"python-pillow","fixed_in":["9.0.1-5.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"pillow","fixed_in":["9.0.1+aikido.1","9.0.1+aikido.2","8.0.1+aikido.1","8.1.2+aikido.1","8.0.1+aikido.2","8.2.0+aikido.1","9.0.0+aikido.1","9.0.0+aikido.2","7.0.0+aikido.2","7.0.0+aikido.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Pillow","fixed_in":["7.2.0-150300.3.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-Pillow","fixed_in":["7.2.0-150300.3.18.1","8.4.0-bp155.3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"pillow","fixed_in":["7.0.0-4ubuntu0.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","fixed_in":["6.2.1-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"pillow","fixed_in":["9.0.1-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"python-Pillow","fixed_in":["8.4.0-bp155.3.9.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"pillow","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.4.0"},{"fixed":"8.4.0.post1+tuxcare"}]}],"versions":["8.4.0"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2+dfsg-0.3+deb11u3"}]}],"versions":["8.1.2+dfsg-0.3","8.1.2+dfsg-0.3+deb11u1","8.1.2+dfsg-0.3+deb11u2"],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1","3.1.1","3.1.2","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0","5.0.0","5.1.0","5.2.0","5.3.0","5.4.0","5.4.0.dev0","5.4.1","6.0.0","6.1.0","6.2.0","6.2.1","6.2.2","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","8.0.0","8.0.1","8.1.0","8.1.1","8.1.2","8.2.0","8.3.0","8.3.1","8.3.2","8.4.0","9.0.0","9.0.1","9.1.0","9.1.1"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-5.oe2203sp2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"11918eac0628ec8ac0812670d9838361ead2d6a4"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1","3.1.1","3.1.2","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0","5.0.0","5.1.0","5.2.0","5.3.0","5.4.0","5.4.0.dev0","5.4.1","6.0.0","6.1.0","6.2.0","6.2.1","6.2.2","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","8.0.0","8.0.1","8.1.0","8.1.1","8.1.2","8.2.0","8.3.0","8.3.1","8.3.2","8.4.0","9.0.0","9.0.1","9.1.0","9.1.1","4.0.0a","3.1.0-rc1","2.9.0.dev2","2.9.0.dev1","2.9.0.dev0"]},{"source":"osv","ecosystem":"Root:PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1+aikido.1"},{"fixed":"9.0.1+aikido.2"},{"fixed":"8.0.1+aikido.1"},{"fixed":"8.1.2+aikido.1"},{"fixed":"8.0.1+aikido.2"},{"fixed":"8.2.0+aikido.1"},{"fixed":"9.0.0+aikido.1"},{"fixed":"9.0.0+aikido.2"},{"fixed":"7.0.0+aikido.2"},{"fixed":"7.0.0+aikido.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.0-150300.3.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.0-150300.3.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-4ubuntu0.7"}]}],"versions":["6.1.0-1","6.1.0-1build1","6.2.1-2","7.0.0-4","7.0.0-4build1","7.0.0-4ubuntu0.1","7.0.0-4ubuntu0.2","7.0.0-4ubuntu0.3","7.0.0-4ubuntu0.4","7.0.0-4ubuntu0.5","7.0.0-4ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-3ubuntu0.1~esm1"}]}],"versions":["6.2.1-3~build1","6.2.1-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1ubuntu0.1"}]}],"versions":["8.1.2+dfsg-0.3","9.0.0-1","9.0.1-1","9.0.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-4ubuntu0.7"}]}],"versions":["6.1.0-1","6.1.0-1build1","6.2.1-2","7.0.0-4","7.0.0-4build1","7.0.0-4ubuntu0.1","7.0.0-4ubuntu0.2","7.0.0-4ubuntu0.3","7.0.0-4ubuntu0.4","7.0.0-4ubuntu0.5","7.0.0-4ubuntu0.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-1ubuntu0.1"}]}],"versions":["8.1.2+dfsg-0.3","9.0.0-1","9.0.1-1","9.0.1-1build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pillow-python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1-3ubuntu0.1~esm1"}]}],"versions":["6.2.1-3~build1","6.2.1-3"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-bp155.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-bp155.3.9.1"}]}]}],"products":[{"vendor":"python","product":"pillow"}],"references":[{"url":"https://github.com/python-pillow/Pillow/commit/11918eac0628ec8ac0812670d9838361ead2d6a4","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/python-pillow/Pillow/pull/6402","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://bugs.gentoo.org/855683","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","web"]},{"url":"https://github.com/python-pillow/Pillow/releases/tag/9.2.0","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"https://cwe.mitre.org/data/definitions/409.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202211-10","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45198","tags":["web","advisory"]},{"url":"https://github.com/python-pillow/Pillow/pull/6402/commits/c9f1b35e981075110a23487a8d4a6cbb59a588ea","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-42979.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-m2vv-5vj5-2hm7","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45198.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-45198","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2023-0164.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31019","tags":["report"]},{"url":"https://github.com/python-pillow/Pillow/releases/tag/9.1.1","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1923","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242908-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205416","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45198","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-45198","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5777-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5777-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24303","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCGXLEMT363ZHOQX2SPXT2G7LEECANKD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T00:00:00Z","modified":"2024-08-03T14:09:56.639Z","updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-0197","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T00:00:00Z","modified":"2024-08-03T14:09:56Z","updated_at":"2026-11-03T03:25:19.130756Z"}],"ghsa":[{"id":"GHSA-m2vv-5vj5-2hm7","title":"Pillow vulnerable to Data Amplification attack.","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T12:00:15Z","modified":"2024-10-11T20:44:47Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-409"],"updated_at":"2026-11-02T14:38:09.785133Z"}],"nvd":[{"id":"CVE-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T07:15:10.347Z","modified":"2026-06-17T05:09:37.82Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"GHSA-m2vv-5vj5-2hm7","title":"Pillow vulnerable to Data Amplification attack.","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T12:00:15Z","modified":"2024-10-14T18:39:06.000592Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-409"],"updated_at":"2026-11-02T15:46:51.10002Z"},{"id":"OESA-2023-1923","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \\ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.\r\n\r\nSecurity Fix(es):\r\n\r\nPillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).(CVE-2022-45198)","status":"published","published":"2023-12-15T11:06:22Z","modified":"2026-08-18T01:18:05.964814032Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"UBUNTU-CVE-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T07:15:00Z","modified":"2026-02-04T03:10:30.028439Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"BIT-pillow-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2024-03-06T11:02:02.18Z","modified":"2026-09-08T08:48:18.483560109Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CLSA-2026-1772410256","title":"TuxCare security update for pillow (3 CVEs)","description":"TuxCare rebuilt pillow to address 3 CVEs. Fixed in 8.4.0.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:08Z","modified":"2026-10-15T09:47:41.942656404Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CVE-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T00:00:00Z","modified":"2026-10-28T02:31:08.860418488Z","updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-45198","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T07:15:10.347Z","modified":"2026-11-03T06:03:01.151124286Z","updated_at":"2026-11-03T06:43:01.507088Z"},{"id":"DLA-4462-1","title":"pillow - security update","status":"published","published":"2026-02-01T00:00:00Z","modified":"2026-02-01T04:30:13.308807Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0164","title":"Updated python-pillow packages fix security vulnerability","description":"libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in\nthe processing of invalid TGA image files. (CVE-2022-30595)\nImproper Handling of Highly Compressed GIF Data (Data Amplification).\n(CVE-2022-45198)\n","status":"published","published":"2023-05-16T19:17:40Z","modified":"2026-04-16T04:41:29.504737814Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:0253-1","title":"Security update for python-Pillow","description":"This update for python-Pillow fixes the following issues:\n\n- CVE-2022-45198: Fixed improper handling of highly compressed GIF data (boo#1205416)\n","status":"published","published":"2024-08-18T16:01:19Z","modified":"2026-02-04T03:18:25.491931Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"PYSEC-2022-42979","description":"Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).","status":"published","published":"2022-11-14T07:15:00Z","modified":"2026-06-10T17:02:31.598361984Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"ROOT-APP-PYPI-CVE-2022-45198","title":"CVE-2022-45198 in pillow - Patched by Root","description":"Root has patched CVE-2022-45198 in the pillow package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-11-05T05:49:19Z","modified":"2026-11-05T06:15:10.83720848Z","updated_at":"2026-11-05T07:10:31.343344Z"},{"id":"SUSE-SU-2024:2908-1","title":"Security update for python-Pillow","description":"This update for python-Pillow fixes the following issues:\n\n- CVE-2022-45198: Fixed improper handling of highly compressed GIF data (bsc#1205416)\n","status":"published","published":"2024-08-14T12:46:45Z","modified":"2026-02-04T02:47:03.29255Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-5777-1","title":"pillow vulnerabilities","description":"It was discovered that Pillow incorrectly handled the deletion of temporary\nfiles when using a temporary directory that contains spaces. An attacker could\npossibly use this issue to delete arbitrary files. This issue only affected\nUbuntu 20.04 LTS. (CVE-2022-24303)\n\nIt was discovered that Pillow incorrectly handled the decompression of highly\ncompressed GIF data. An attacker could possibly use this issue to cause Pillow\nto crash, resulting in a denial of service. (CVE-2022-45198)\n","status":"published","published":"2022-12-13T10:06:51Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5777-2","title":"pillow-python2 vulnerabilities","description":"USN-5777-1 fixed vulnerabilities in Pillow (Python 3). This update provides the\ncorresponding updates for Pillow (Python 2) in Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Pillow incorrectly handled the deletion of temporary\n files when using a temporary directory that contains spaces. An attacker could\n possibly use this issue to delete arbitrary files. This issue only affected\n Ubuntu 20.04 LTS. (CVE-2022-24303)\n \n It was discovered that Pillow incorrectly handled the decompression of highly\n compressed GIF data. An attacker could possibly use this issue to cause Pillow\n to crash, resulting in a denial of service. (CVE-2022-45198)\n","status":"published","published":"2022-12-14T09:15:09Z","modified":"2026-02-10T04:42:52Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}