Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pillow(PyPI) | 0 | 8.1.2 | N/A |
CVSS Metrics
