CVE-2023-44271

An issue was discovered in Pillow before 10.0.0

published November 3, 2023

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01348 · 71.2th percentile
Published
2023-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    An issue was discovered in Pillow before 10.0.0
    cvelistv5