Security Advisory
CVE-2023-44271
7.5
HIGH
Vulnerability Description
An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.
Published Date
November 3, 2023
Official Source
NIST NVD Advisory