CVE-2022-22815

Medium

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

mitre·CWE-665·Published 2022-01-07

CVSS

6.5

EPSS

0.03

KEV

Exploits

cve.orgen

84 chars

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

NVDen

84 chars

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

OSV.deven

84 chars

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.

GHSAen

148 chars

Pillow is the friendly PIL (Python Imaging Library) fork. `path_getbbox` in `path.c` in Pillow before 9.0.0 improperly initializes `ImagePath.Path`.

NVDes

125 chars

La función path_getbbox en el archivo path.c en Pillow versiones anteriores a 9.0.0 inicializa incorrectamente ImagePath.Path

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P
3.1	Primary	NVD	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L