NA

CVE-2023-44271

Published: 03/11/2023 Updated: 22/03/2024
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

An issue exists in Pillow prior to 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

Vulnerable Product Search on Vulmon Subscribe to Product

python pillow

fedoraproject fedora 38

Vendor Advisories

Synopsis Moderate: python-pillow security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python-pillow is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as ...
An issue was discovered in Pillow before 1000 It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271) Affected ver ...