CVE-2021-28675 in Pillow
Summary
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
03/18/2021
Disclosure
06/02/2021
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 176235 | Pillow Data Block PSDImagePlugin.PsdImageFile denial of service | 404 | Not defined | Official fix | CVE-2021-28675 |