Alpine/py3-pillow: medium 6.5

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.

Action: Upgrade py3-pillow to 9.0.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-22816#Alpine:v3.17/py3-pillow
• https://security.alpinelinux.org/vuln/CVE-2022-22816

published 2022-01-10T14:12:54.813Z · modified 2026-11-03T07:31:13.927615608Z · JSON