An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| Pillow(PyPI) | 5.1.0 | 8.2.0 | N/A |
CVSS Metrics
