4 matches found
CVE-2026-8814
CVE-2026-8814 affects the ExifReader library prior to version 4.39.0. The issue is an improper handling of highly compressed data (Data Amplification) that occurs when decompressing PNG zTXt metadata without a built-in maximum decompressed output size, which can cause a crafted PNG to materialize...
6.9CVSS5.8AI score0.00465EPSS
SaveExploits0References3
CVE-2014-9601
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed...
6.4AI score0.04573EPSS
SaveExploits0References7
20