{"id":"OSV-2022-715","aliases":[],"status":"published","title":"Segv on unknown address in jpeg_read_scanlines","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217\nhttps://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode\n\n```\nCrash type: Segv on unknown address\nCrash state:\njpeg_read_scanlines\nImagingJpegDecode\n_decode\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-08-15T00:00:50.156496Z","modified":"2022-10-30T22:16:00Z","affected":[{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"GIT","events":[{"introduced":"c58d2817bc891c26e6b8098b8909c0eb2e7ce61b"},{"fixed":"9887544fafcd13cc8afcfa0c6d0f2e6facc1a8b8"}]}],"versions":["9.1.0","9.1.1","9.2.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-715","title":"Segv on unknown address in jpeg_read_scanlines","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217\nhttps://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode\n\n```\nCrash type: Segv on unknown address\nCrash state:\njpeg_read_scanlines\nImagingJpegDecode\n_decode\n```\n","status":"published","published":"2022-08-15T00:00:50.156496Z","modified":"2022-10-30T22:16:00Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}