| Package | Affected versions | Patched versions |
|---|---|---|
| pillow | = 9.1.0= 9.1.1= 9.2.0 |
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html#decode-jpeg-compressed-blp1-data-in-original-mode
Crash type: Segv on unknown address
Crash state:
jpeg_read_scanlines
ImagingJpegDecode
_decode
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free