PNGs also have optional compressed text metadata chunks, and it&#x27;s possible to sneak a decompression bomb into one of those as well. You can get about a factor of 1000 in the compression -- 1MB of &#x27;a&#x27; winds up being about 1040 bytes. You can have multiple itxt chunks, and it appears that the chunk size is only limited to 2^31-1.<p>See <a href="https:&#x2F;&#x2F;github.com&#x2F;python-pillow&#x2F;Pillow&#x2F;blob&#x2F;master&#x2F;Tests&#x2F;check_png_dos.py" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;python-pillow&#x2F;Pillow&#x2F;blob&#x2F;master&#x2F;Tests&#x2F;ch...</a> for a quick way to generate some of these.