Alpine/py3-pillow: medium 6.5

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

Action: Upgrade py3-pillow to 8.4.0-r2 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-22816
• https://security.alpinelinux.org/vuln/CVE-2022-22816

published 2022-01-10T14:12:54.813Z · modified 2026-10-15T07:17:54.162033556Z · JSON