Pillow Buffer overflow in ImagingFliDecode

MEDIO 6.5CVE-2016-0775 · GHSA-8xjv-v9xq-m5h9 · PYSEC-2016-6 · Published 13/04/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
pillow PyPI	`< 3.1.1`	`3.1.1`
pillow python	`≤ 3.1.0`	No fix yet

Description

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

NVD description

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

References

nvd.nist.gov/vuln/detail/CVE-2016-0775 · ADVISORY
python-pillow/Pillow commit 893a408 · WEB
GitHub Advisory GHSA-8xjv-v9xq-m5h9 · ADVISORY
pypa/advisory-database · WEB
python-pillow/Pillow · PACKAGE
python-pillow/Pillow · WEB
security.gentoo.org/glsa/201612-52 · WEB
debian.org/security/2016/dsa-3499 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free