Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
python-pillow/Pillow
main @ e41083f
85
Fixes
0
CVEs
CRITICAL
Peak severity
68.8%
Coverage
Highlights
Memory Corruption: 18 prior fixes. Scrutinize any change in this area.
src/libImaging/TiffDecode.c: most-fixed (16 issues). Treat as high-risk during review.
62 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow / Memory Corruption: Numerous fixes target overflow in TIFF strip/tile buffer size calculations, leading to heap overflows. Repeatedly patched with realloc size checks, INT_MAX bounds, and libtiff-provided sizes.
Buffer Overflow: SGI RLE decoder has a long history of OOB writes in expandrow/expandrow2 due to unchecked run lengths and buffer sizes. Multiple fixes added cumulative pixel count checks and buffer size validation.
Memory Corruption: FLI decoder had integer overflows in frame size/advance arithmetic and missing bounds checks on chunk sizes, causing OOB reads and infinite loops.