{"id":"CVE-2022-45199","aliases":["BIT-pillow-2022-45199","DEBIAN-CVE-2022-45199","EUVD-2022-0198","GHSA-q4mp-jvh2-76fj","OESA-2022-2113","OESA-2023-1024","PYSEC-2022-42980"],"status":"published","title":"Pillow subject to DoS via SAMPLESPERPIXEL tag","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01202,"percentile":0.68479,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-11-14T00:00:00Z","modified":"2026-10-28T02:30:34Z","fixes":[{"ecosystem":"PyPI","package":"pillow","fixed_in":["9.3.0"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"pillow","fixed_in":["9.3.0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pillow","fixed_in":["9.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pillow","fixed_in":["9.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pillow","fixed_in":["9.3.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","fixed_in":["9.0.1-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","fixed_in":["9.0.1-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-pillow","fixed_in":["9.0.1-3.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"python-pillow","fixed_in":["9.0.1-3.oe2203sp1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.2.0"},{"fixed":"9.3.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"pillow","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"9.3.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.0-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.2.0"},{"fixed":"9.3.0"}]}],"versions":["9.2.0"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-3.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.1-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"2444cddab2f83f28687c7c20871574acbb6dbcf3"}]},{"type":"ECOSYSTEM","events":[{"introduced":"9.2.0"},{"fixed":"9.3.0"}]}],"versions":["9.2.0","9.1.0","9.0.0","8.4.0","8.3.0","8.2.0","8.1.0","8.0.0","7.2.0","7.1.0","7.0.0","6.2.0","6.1.0","6.0.0","5.4.0","5.3.0","5.2.0","5.1.0","5.0.0","4.3.0","4.2.0","4.1.0","4.0.0","4.0.0a","3.4.0","3.3.0","3.2.0","3.1.0","3.1.0-rc1","2.9.0","2.9.0.dev2","2.9.0.dev1","2.9.0.dev0","2.8.1","2.8.0","2.7.0","2.5.0","2.3.0","2.2.1","2.2.0","2.1.0","2.0.0","1.7.8","1.7.7","1.2","1.0"]}],"products":[{"vendor":"python","product":"pillow"}],"references":[{"url":"https://github.com/python-pillow/Pillow/commit/2444cddab2f83f28687c7c20871574acbb6dbcf3","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/python-pillow/Pillow/pull/6700","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://bugs.gentoo.org/878769","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","web"]},{"url":"https://github.com/python-pillow/Pillow/releases/tag/9.3.0","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202211-10","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45199","tags":["web","advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2022-42980.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q4mp-jvh2-76fj","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45199.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-45199","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2113","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1024","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-45199","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T00:00:00Z","modified":"2024-08-03T14:09:56.981Z","updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-0198","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T00:00:00Z","modified":"2024-08-03T14:09:56Z","updated_at":"2026-11-03T03:25:19.130756Z"}],"ghsa":[{"id":"GHSA-q4mp-jvh2-76fj","title":"Pillow subject to DoS via SAMPLESPERPIXEL tag","description":"Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.","status":"published","published":"2022-11-14T12:00:15Z","modified":"2024-10-11T20:42:02Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:09.785133Z"}],"nvd":[{"id":"CVE-2022-45199","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T07:15:10.64Z","modified":"2026-06-17T05:09:37.973Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"GHSA-q4mp-jvh2-76fj","title":"Pillow subject to DoS via SAMPLESPERPIXEL tag","description":"Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.","status":"published","published":"2022-11-14T12:00:15Z","modified":"2024-10-14T18:44:08.213946Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"OESA-2022-2113","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.\r\n\r\nSecurity Fix(es):\r\n\r\nPillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.(CVE-2022-45199)","status":"published","published":"2022-11-25T11:05:26Z","modified":"2026-08-18T01:17:26.902230557Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1024","title":"python-pillow security update","description":"Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift.\r\n\r\nSecurity Fix(es):\r\n\r\nPillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.(CVE-2022-45199)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:30.159742863Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"BIT-pillow-2022-45199","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2024-03-06T11:01:50.684Z","modified":"2026-09-08T08:48:18.529058426Z","updated_at":"2026-11-02T15:28:34.724063Z"},{"id":"CVE-2022-45199","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T00:00:00Z","modified":"2026-10-28T02:30:34.7532332Z","updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-45199","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T07:15:10.64Z","modified":"2026-11-03T06:03:12.319360271Z","updated_at":"2026-11-03T06:42:33.899035Z"},{"id":"PYSEC-2022-42980","description":"Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.","status":"published","published":"2022-11-14T07:15:00Z","modified":"2026-06-10T17:02:31.598026305Z","updated_at":"2026-11-02T15:52:53.449407Z"}]}}