X-Forwarded-Sudo

In the ` load bitmaps()` function within `PIL/PcfFontFile.py`, glyph dimensions are read from the PCF METRICS section and passed to `Image.frombytes()` without invoking `Image. decompression bomb check()`. This allows specially crafted PCF font data to trigger excessive memory allocation, potentially leading to a denial of service.

The `bdf char()` function in `PIL/BdfFontFile.py` reads the BBX width and height fields from a BDF font file and passes these attacker-controlled dimensions to `Image.new()` without invoking `Image. decompression bomb check()`. This bypasses the documented decompression bomb protection, which is a security mechanism designed to prevent the processing of maliciously crafted files that expand to an enormous size in memory, leading to excessive memory allocation.

In the Python imaging library, the `GdImageFile. open()` function in `PIL/GdImageFile.py` reads image dimensions from the GD 2.x header and stores them in `self. size` without invoking `Image. decompression bomb check()`. This allows a specially crafted .gd file to trigger excessive C-heap allocation during loading, which can lead to a denial of service. C-heap allocation refers to the process of reserving a block of memory in the heap area of the C runtime environment.