Lucene search
+L

18 matches found

Github Security Blog
Github Security Blog
added 2026/07/20 11:18 p.m.14 views

Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Summary src/libImaging/Jpeg2KDecode.c:853 accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile. That accumulated value is then used in the tilebytes calculation at src/libImaging/Jpeg2KDecode.c:868, which can make the decoder grow state-buffer v...

8.7CVSS7.2AI score0.00393EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder