CVE-2014-3589: Debian Python-Imaging

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.

Affected products

• Debian Python-Imaging: affected versions not specified
• Opensuse Opensuse: version 13.2 only
• Python Pillow: up to and including 2.3.1; version 2.3.0 only; version 2.5.0 only; version 2.5.1 only; version 2.5.2 only

Published 2014-08-25. Last modified 2026-06-17.