CVE-2021-29453 Denial of service through memory exhaustion

matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in term...

CVE-2021-29453

CVE-2021-29453 – matrix-media-repo : Vulnerable in versions 1.2.6 and earlier. A crafted, small-file-size image that expands to extremely large dimensions during thumbnailing can exhaust memory, causing DoS. This is triggered during the thumbnailing process when loading the image into memory. A f...