Pillow subject to DoS via SAMPLESPERPIXEL tag

HIGH 7.5CVE-2022-45199 · BIT-pillow-2022-45199 · GHSA-q4mp-jvh2-76fj · Published 14/11/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
pillow PyPI	`≥ 9.2.0, < 9.3.0`	`9.3.0`
pillow python	`< 9.3.0`	`9.3.0`

Description

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0.

NVD description

Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.

References

nvd.nist.gov/vuln/detail/CVE-2022-45199 · ADVISORY
python-pillow/Pillow#6700 · WEB
python-pillow/Pillow commit 2444cdd · WEB
bugs.gentoo.org/878769 · WEB
pypa/advisory-database · WEB
python-pillow/Pillow · PACKAGE
python-pillow/Pillow release 9.3.0 · WEB
security.gentoo.org/glsa/202211-10 · WEB
GitHub Advisory GHSA-q4mp-jvh2-76fj · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free