Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2022/11/14 12:00 p.m.•56 views

Pillow subject to DoS via SAMPLESPERPIXEL tag

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0...

7.5CVSS7.2AI score0.01206EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2022/11/14 12:00 p.m.•27 views

GHSA-Q4MP-JVH2-76FJ Pillow subject to DoS via SAMPLESPERPIXEL tag

Pillow starting with 9.2.0 and prior to 9.3.0 allows denial of service via SAMPLESPERPIXEL. A large value in the SAMPLESPERPIXEL tag could lead to a memory and runtime DOS in TiffImagePlugin.py when setting up the context for image decoding. This issue has been patched in version 9.3.0...

8.7CVSS7.2AI score0.01206EPSS
SaveExploits0References8
Rows per page
Query Builder