Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/07/20 9:13 p.m.•34 views

Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`

Description PIL/GdImageFile.py GdImageFile.open reads image dimensions from the GD 2.x header and stores them in self.size without calling Image.decompressionbombcheck. Because GdImageFile is not registered with Image.registeropen, it never passes through the standard Image.open code path that...

7.5CVSS7.5AI score0.00518EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder