Description
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.
References (3)
Scores
CVSS v3
5.5
EPSS
0.0014
EPSS Percentile
34.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-252
Status
published
Products (3)
fedoraproject/fedora
33
pypi/pillow
0 - 8.2.0PyPI
python/pillow
< 8.2.0
Published
Jun 02, 2021
Tracked Since
Feb 18, 2026