Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-03-03T08:41:50

Updated: 2024-08-03T21:33:17.231Z

Reserved: 2021-03-03T00:00:00

Link: CVE-2021-27922

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-03-03T09:15:14.233

Modified: 2023-11-07T03:32:02.737

Link: CVE-2021-27922

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-03-03T00:00:00Z

Links: CVE-2021-27922 - Bugzilla