3 matches found
EUVD-2026-41901
Pillow GdImageFile.open: image dimensions accepted without decompressionbombcheck...
7.5CVSS5.1AI score0.00418EPSS
SaveExploits1References5
CVE-2026-55380
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...
7.5CVSS0.00418EPSS
SaveExploits1References3
CVE-2026-55380
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...
7.5CVSS6.1AI score0.00418EPSS
SaveExploits1
20