CyberRota Analysis
AI-GeneratedThe Pillow Python imaging library versions 12.0.0 through 12.2.0 are vulnerable due to an issue in the EPS parser that allows a crafted EPS file to trigger an infinite loop during image processing. This can lead to denial of service as the application may become unresponsive. Developers and organizations using affected versions should prioritize upgrading to version 12.3.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to the same directive and parse it repeatedly in an infinite loop. This issue is fixed in version 12.3.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)