Tag

decompression-bomb

Safeguard articles tagged "decompression-bomb" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2020-35655: Decompression bomb DoS in Pillow

A crafted image file could force Pillow to over-allocate memory, causing denial of service. Here's what CVE-2020-35655 affects, its severity, and how to remediate it.

Oct 5, 20257 min read