Heap-based Buffer Overflow

pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...

pillow:fuzz_pillow: Heap-buffer-overflow in ImagingTgaRleDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5309778291720192 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x616000658a81 Crash State: ImagingTgaRleDecode decode...