PT-2021-17670 · Pillow +9 · Pillow +9

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.1.1 Description: The issue allows attackers to cause a denial of service due to memory consumption. This occurs because the reported size of a contained image is not properly checked for a BLP container, leading to...