CVE-2023-44271

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 3, 2023

Updated: Mar 22, 2024

CWE ID 770

Summary

CVE-2023-44271 is a Denial of Service vulnerability affecting Pillow before version 10.0.0. This issue arises from uncontrolled memory allocation in the truetype module of ImageFont in ImageDraw. When textlength function processes long text arguments, the service may crash due to running out of memory as a result.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Python Pillow
Fedora Operating System

Affected Vendors

Fedora Project
Python Software Foundation

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s0SADu
https://www.cve.org/CVERecord?id=CVE-2023-44271
https://nvd.nist.gov/vuln/detail/CVE-2023-44271

Back to Vulnerability Database