CVE-2014-3589
No CVSS score yet. EPSS 3.4% chance of exploitation in the next 30 days. Fixed in pillow 2.3.2, 2.5.2.
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
- EPSS
- 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:python-imaging
- opensuse:opensuse
- python:pillow
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cfmr-38g9-f2h7 | PyPI | pillow | <2.3.2 | 2.3.2 |
| GHSA-cfmr-38g9-f2h7 | PyPI | pillow | >=2.5 <2.5.2 | 2.5.2 |
| PYSEC-2014-10 | PyPI | pillow | <2.3.2 >=2.5 <2.5.2 | 2.3.2, 2.5.2 |