CVE-2014-9601: PNG decompression DOS

January 16, 2015 (updated October 30, 2018)

A flaw in PngImagePlugin.py is triggered when handling PNG image decompression. This may allow a remote attacker to cause a denial of service.

References

www.osvdb.org/show/osvdb/116760
github.com/python-pillow/Pillow/pull/1060

Detect and mitigate CVE-2014-9601 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →