Threats tagged 'brew-aider-cve-2026-112400'

A vulnerability in Pillow's GIF image handling allows a denial of service (DoS) via memory exhaustion. When processing animated GIFs, Pillow incorrectly retains a rejected oversized frame size after raising a DecompressionBombError, leading subsequent operations to allocate memory based on this stale size. This can cause applications that catch the error and continue using the same image object to consume gigabytes of memory, potentially crashing or being killed by the OS.