GCVE-VVD-MAGEIA-2023-164

Advisory Published

Vulnetix · Advisory published May 16, 2023

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files. (CVE-2022-30595) Improper Handling of Highly Compressed GIF Data (Data Amplification). (CVE-2022-45198)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-pillow	0 (affected), 9.2.0-1.mga8 (unaffected)	—

Aliases

CVE-2022-30595

Transitive aliases

WID-SEC-W-2022-0456 BIT-PILLOW-2022-30595 EUVD-2022-0201 GHSA-hr8g-f6r6-mr22 BDU:2022-04237 GSD-2022-30595 PYSEC-2022-43145 OPENSUSE-SU-2024:12111-1

References

Updated python-pillow packages fix security vulnerability

advisory

Updated python-pillow packages fix security vulnerability

issue

Updated python-pillow packages fix security vulnerability

fix

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON