A flaw was found in Pillow. The Encapsulated PostScript (EPS) image loader only validates decompression bomb limits against the unscaled dimensions defined in the file, rather than the final scaled dimensions requested during rendering. An attacker can exploit this issue by providing a crafted EPS file, forcing the rendering process to generate excessively large temporary files and consume excessive CPU and disk resources, resulting in a Denial of Service (DoS).