Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| Pillow(PyPI) | 0 | 8.1.2 | N/A |
CVSS Metrics
