This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-16865 →

DEBIAN-CVE-2019-16865

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts...

Original description

The description as published by the source.

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1"}]}]

Debian:13 pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1"}]}]

Debian:14 pillow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-1"}]}]

References

advisory security-tracker.debian.org