Lucene search

K
osvGoogleOSV:PYSEC-2021-94
HistoryJun 02, 2021 - 4:15 p.m.

PYSEC-2021-94

2021-06-0216:15:00
Google
osv.dev
11

0.001 Low

EPSS

Percentile

32.6%

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.