diff -rupN --no-dereference Pillow-5.4.1/src/PIL/GifImagePlugin.py Pillow-5.4.1-new/src/PIL/GifImagePlugin.py --- Pillow-5.4.1/src/PIL/GifImagePlugin.py 2019-01-06 13:12:16.000000000 +0100 +++ Pillow-5.4.1-new/src/PIL/GifImagePlugin.py 2020-02-13 14:44:21.493015762 +0100 @@ -258,6 +258,7 @@ class GifImageFile(ImageFile.ImageFile): self.dispose = None elif self.disposal_method == 2: # replace with background colour + Image._decompression_bomb_check(self.size) self.dispose = Image.core.fill("P", self.size, self.info["background"]) else: diff -rupN --no-dereference Pillow-5.4.1/src/PIL/IcoImagePlugin.py Pillow-5.4.1-new/src/PIL/IcoImagePlugin.py --- Pillow-5.4.1/src/PIL/IcoImagePlugin.py 2019-01-06 13:12:16.000000000 +0100 +++ Pillow-5.4.1-new/src/PIL/IcoImagePlugin.py 2020-02-13 14:44:21.494015755 +0100 @@ -167,6 +167,7 @@ class IcoFile(object): else: # XOR + AND mask bmp frame im = BmpImagePlugin.DibImageFile(self.buf) + Image._decompression_bomb_check(im.size) # change tile dimension to only encompass XOR image im._size = (im.size[0], int(im.size[1] / 2))