CVE-2022-30595: Python Pillow

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.

Affected products

• Python Pillow: version 9.1.0 only

Published 2022-05-25. Last modified 2026-06-17.