CVE-2022-45198

High

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

mitre·CWE-409·Published 2022-11-14

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

98 chars

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

NVDen

98 chars

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

OSV.deven

98 chars

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

GHSAen

98 chars

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).

NVDes

113 chars

Pillow anterior a 9.2.0 realiza un manejo inadecuado de datos GIF altamente comprimidos (amplificación de datos).

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H