25 matches found
CVE-2022-22816
CVE-2022-22816 affects Pillow’s image path handling. The vulnerability is a buffer over-read in path_getbbox() inside path.c during initialization of ImagePath.Path, present in Pillow versions before 9.0.0. The flaw can allow reading memory outside the intended bounds. The issue is mitigated by u...
6.5CVSS7.9AI score0.0192EPSS
SaveExploits0References5Affected Software1
CVE-2022-22815
pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...
3.2AI score
SaveExploits0References7
CVE-2022-22816
pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...
6.5CVSS8.5AI score0.0192EPSS
SaveExploits0
20