CVE-2016-4009 REJECTED

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

EPSS 5.26% · 89.9th percentile

Risk Scores

EPSS Score
5.26%
89.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSpillow0, 2.9.0-1, 3.0.0-1

Timeline

References

Open in Interactive Console →