REDHAT-BUG-2497455: High severity Pillow Pillow vulnerability
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open() read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Pillowto a version that resolves this vulnerability.Fixed in 12.3.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2497455?
The severity of REDHAT-BUG-2497455 is rated as high with a score of 7.
How do I fix REDHAT-BUG-2497455?
To fix REDHAT-BUG-2497455, update Pillow to version 12.3.0 or later.
What is the main risk associated with REDHAT-BUG-2497455?
The main risk is that a crafted .gd file can lead to excessive C-heap allocation.
Which library is affected by REDHAT-BUG-2497455?
The affected library is Pillow, specifically the GdImageFile.py component.
What issue does REDHAT-BUG-2497455 exploit?
REDHAT-BUG-2497455 exploits the failure to call Image._decompression_bomb_check() when reading image dimensions.