Lucene search

K
osvGoogleOSV:BIT-PILLOW-2021-28675
HistoryMar 06, 2024 - 11:03 a.m.

BIT-pillow-2021-28675

2024-03-0611:03:45
Google
osv.dev
7
issue
security
vulnerability
psdimageplugin
pillow
dos
image.open
image.load

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.8%

An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.

CPENameOperatorVersion
pillowlt8.2.0