CVE-2022-45199

Vulnerability

Overview

Pillow versions prior to 9.3.0 are vulnerable to a denial-of-service condition via the SAMPLESPERPIXEL tag in TIFF images. A crafted TIFF file with an excessively large value for SAMPLESPERPIXEL can cause excessive memory allocation and runtime during image decoding [1][4]. The issue was introduced in Pillow 9.2.0 and was fixed by limiting SAMPLESPERPIXEL to the number of planes the decoder can handle [1][4].

Exploitation

An attacker can exploit this vulnerability by supplying a specially crafted TIFF image to an application that uses Pillow to process images. No authentication is required; the image only needs to be opened or decoded by Pillow. The attack vector is remote if the application processes user-supplied images [1][4].

Impact

Successful exploitation leads to a denial of service, potentially consuming excessive memory or CPU time, which may cause the application to hang or crash [1][4].

Mitigation

Users should upgrade to Pillow 9.3.0 or later, which includes the fix that caps SAMPLESPERPIXEL to prevent the runtime denial of service [1][4].