Lucene search

K
cvelistMitreCVELIST:CVE-2021-28678
HistoryJun 02, 2021 - 3:16 p.m.

CVE-2021-28678

2021-06-0215:16:23
mitre
www.cve.org
2

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.