Pillow Integer overflow in ImagingResampleHorizontal

CRITICAL 9.8CVE-2016-4009 · GHSA-hvr8-466p-75rh · PYSEC-2016-7 · Published 13/04/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
pillow PyPI	`< 3.1.1`	`3.1.1`
pillow python	`≤ 3.1.0`	No fix yet

Description

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

NVD description

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

References

nvd.nist.gov/vuln/detail/CVE-2016-4009 · ADVISORY
python-pillow/Pillow#1714 · WEB
python-pillow/Pillow commit 4e0d9b0 · WEB
GitHub Advisory GHSA-hvr8-466p-75rh · ADVISORY
pypa/advisory-database · WEB
python-pillow/Pillow · PACKAGE
python-pillow/Pillow · WEB
security.gentoo.org/glsa/201612-52 · WEB
securityfocus.com/bid/86064 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free