2 matches found
PYSEC-2021-94
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...
5.5CVSS6.8AI score0.00732EPSS
SaveExploits0References4Affected Software1
UBUNTU-CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...
5.5CVSS6.2AI score0.00732EPSS
SaveExploits0References4
20