Wind River Support Network

HomeDefectsLIN1021-2370

Fixed

LIN1021-2370 : Security Advisory - python3-pillow - CVE-2022-22816

Created: Jan 8, 2022 Updated: Feb 7, 2022

Resolved Date: Feb 7, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.10

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

https://nvd.nist.gov/vuln/detail/CVE-2022-22816

CVEs

CVE-2022-22816