Skip to content

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

Moderate severity GitHub Reviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Apr 29, 2024

Package

pip pillow (pip)

Affected versions

< 2.5.3

Patched versions

2.5.3

Description

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

References

Published by the National Vulnerability Database May 1, 2015
Published to the GitHub Advisory Database May 14, 2022
Reviewed Apr 29, 2024
Last updated Apr 29, 2024

Severity

Moderate

Weaknesses

No CWEs

CVE ID

CVE-2014-3598

GHSA ID

GHSA-j6f7-g425-4gmx

Source code

Checking history
See something to contribute? Suggest improvements for this vulnerability.