PT-2020-22668 · Python Imaging Library · Pillow
Published
2020-01-05
·
Updated
2020-01-05
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Pillow versions prior to 6.2.2
Description
The issue is caused by the FpxImagePlugin.py module calling the range function on an unvalidated 32-bit integer when the number of bands is large. This results in different errors depending on the operating system and Python version. On Windows with 32-bit Python, it causes an OverflowError or MemoryError due to the 2 GB memory limit. On Linux with 64-bit Python, the process is terminated by the OOM killer.
Recommendations
For Pillow versions prior to 6.2.2, update to version 6.2.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Pillow