{"id":"CVE-2016-0740","aliases":["DEBIAN-CVE-2016-0740","DSA-3499-1","EUVD-2016-0021","GHSA-hggx-3h72-49ww","MGASA-2016-0066","PYSEC-2016-5","SUSE-SU-2016:0924-1","SUSE-SU-2016:0935-1","SUSE-SU-2016:1355-1","SUSE-SU-2016:1569-1","UBUNTU-CVE-2016-0740","USN-3090-1","openSUSE-SU-2024:10511-1","openSUSE-SU-2024:10567-1","openSUSE-SU-2024:11209-1","openSUSE-SU-2024:13827-1","openSUSE-SU-2026:11261-1"],"status":"published","title":"Pillow Buffer overflow in ImagingLibTiffDecode","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02656,"percentile":0.85771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-02-04T00:00:00Z","modified":"2026-10-24T14:03:47Z","fixes":[{"ecosystem":"PyPI","package":"pillow","fixed_in":["3.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"pillow","fixed_in":["3.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pillow","fixed_in":["3.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pillow","fixed_in":["3.1.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"pillow","fixed_in":["2.3.0-1ubuntu3.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-2+deb8u2"}]}],"versions":["2.6.1-2","2.6.1-2+deb8u1"],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1"]},{"source":"osv","ecosystem":"Mageia:5","package":"python-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-2.5.mga5"}]}],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"pillow","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"6dcbf5bd96b717c58d7b642949da8d323099928e"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1"]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 2.1","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 1.0","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 2","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1ubuntu3.2"}]}],"versions":["2.2.1-1ubuntu2","2.2.1-2ubuntu1","2.2.1-3ubuntu2","2.2.1-3ubuntu3","2.2.1-3ubuntu4","2.2.1-3ubuntu6","2.3.0-1ubuntu1","2.3.0-1ubuntu2","2.3.0-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1ubuntu3.2"}]}],"versions":["2.2.1-1ubuntu2","2.2.1-2ubuntu1","2.2.1-3ubuntu2","2.2.1-3ubuntu3","2.2.1-3ubuntu4","2.2.1-3ubuntu6","2.3.0-1ubuntu1","2.3.0-1ubuntu2","2.3.0-1ubuntu3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.2-1.2"}]}],"bundled":17},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3.0-1.1"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-1.1"}]}],"bundled":24}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"python","product":"pillow"}],"references":[{"url":"https://security.gentoo.org/glsa/201612-52","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory","web"]},{"url":"http://www.debian.org/security/2016/dsa-3499","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e","tags":["x_refsource_CONFIRM","x_transferred","fix","web"]},{"url":"https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0740","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hggx-3h72-49ww","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-5.yaml","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-0740","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2016-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17671","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/02/02/5","tags":["web"]},{"url":"https://github.com/python-pillow/Pillow/blob/777ef4f523679a9ea0f3573efc224bf821b6abe7/docs/releasenotes/3.1.1.rst","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2016-February/176983.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160924-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/965579","tags":["report"]},{"url":"https://bugzilla.suse.com/965582","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0775","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160935-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161355-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161569-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-0740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0740","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3090-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2533","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-44271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55379","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-0740","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:00:00Z","modified":"2024-08-05T22:30:03.984Z","updated_at":"2026-11-02T14:33:37.12286Z"}],"euvd":[{"id":"EUVD-2016-0021","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:00:00Z","modified":"2024-08-05T22:30:03Z","updated_at":"2026-11-03T02:23:00.426765Z"}],"ghsa":[{"id":"GHSA-hggx-3h72-49ww","title":"Pillow Buffer overflow in ImagingLibTiffDecode","description":"Buffer overflow in the `ImagingLibTiffDecode` function in `libImaging/TiffDecode.c` in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2018-07-24T20:03:51Z","modified":"2024-10-09T19:42:55Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:38:09.785133Z"}],"nvd":[{"id":"CVE-2016-0740","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:59:01.377Z","modified":"2026-06-17T00:38:07.953Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:23.795791Z"}],"osv":[{"id":"CVE-2016-0740","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:59:01.377Z","modified":"2026-10-24T14:03:47.949873703Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-0740","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:59:01.377Z","modified":"2026-09-22T07:00:04.039258215Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"GHSA-hggx-3h72-49ww","title":"Pillow Buffer overflow in ImagingLibTiffDecode","description":"Buffer overflow in the `ImagingLibTiffDecode` function in `libImaging/TiffDecode.c` in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2018-07-24T20:03:51Z","modified":"2024-10-09T19:46:10.474967Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"UBUNTU-CVE-2016-0740","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-02-04T00:00:00Z","modified":"2026-02-04T04:16:59.016101Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DSA-3499-1","title":"pillow - security update","status":"published","published":"2016-02-28T00:00:00Z","modified":"2026-03-09T01:21:52.141324Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0066","title":"Updated python-pillow packages fix security vulnerability","description":"A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to\nbe overwritten when opening a specially crafted invalid TIFF file\n(CVE-2016-0740).\n\nA buffer overflow in FliDecode.c causing a segfault when opening FLI files\n(CVE-2016-0775).\n\nA buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD\nfiles. \n","status":"published","published":"2016-02-17T19:06:01Z","modified":"2026-04-16T06:25:44.744934342Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10511-1","title":"python3-Pillow-3.4.2-1.1 on GA media","description":"These are all security issues fixed in the python3-Pillow-3.4.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:50:43.233864Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10567-1","title":"python-Pillow-3.1.1-4.1 on GA media","description":"These are all security issues fixed in the python-Pillow-3.1.1-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:25:40.714562Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11209-1","title":"python36-Pillow-8.3.2-1.2 on GA media","description":"These are all security issues fixed in the python36-Pillow-8.3.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:01.713817Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:13827-1","title":"python310-Pillow-10.3.0-1.1 on GA media","description":"These are all security issues fixed in the python310-Pillow-10.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:45.098529Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2026:11261-1","title":"python313-Pillow-12.3.0-1.1 on GA media","description":"These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-12T00:00:00Z","modified":"2026-07-13T09:00:11.048299149Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"PYSEC-2016-5","description":"Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.","status":"published","published":"2016-04-13T16:59:00Z","modified":"2023-11-08T03:58:05.992552Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"SUSE-SU-2016:0924-1","title":"Security update for python-Pillow","description":"\nThis update for python-Pillow fixes the following security issues:\n\n* Fixed an integer overflow in Resample.c causing writes in the Python heap. \n* Fixed a buffer overflow in PcdDecode.c causing a segfault when opening \n  PhotoCD files. CVE-2016-TBD\n* Fixed a buffer overflow in FliDecode.c causing a segfault when opening \n  FLI files. CVE-2016-0775 (fixes bsc#965582)\n* Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of \n  memory to be overwritten when opening a specially crafted invalid TIFF \n  file. CVE-2016-0740 (fixes bsc#965579)\n","status":"published","published":"2016-03-31T12:18:26Z","modified":"2026-02-04T03:40:10.473939Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0935-1","title":"Security update for python-Pillow","description":"\nThis update for python-Pillow fixes the following security issues:\n\n* CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening \n  FLI files. (bsc#965582)\n* CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of \n  memory to be overwritten when opening a specially crafted invalid TIFF \n  file. (bsc#965579)\n* Fixed an integer overflow in Resample.c causing writes in the Python heap. \n* Fixed a buffer overflow in PcdDecode.c causing a segfault when opening \n  PhotoCD files.\n","status":"published","published":"2016-04-01T13:29:16Z","modified":"2026-02-04T02:56:34.632203Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:1355-1","title":"Security update for python-Pillow","description":"\nThis update for python-Pillow fixes the following security issues:\n\n* CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening \n  FLI files. (bsc#965582)\n* CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of \n  memory to be overwritten when opening a specially crafted invalid TIFF \n  file. (bsc#965579)\n* Fixed an integer overflow in Resample.c causing writes in the Python heap. \n* Fixed a buffer overflow in PcdDecode.c causing a segfault when opening \n  PhotoCD files.\n","status":"published","published":"2016-05-19T08:04:33Z","modified":"2026-02-04T02:33:32.563513Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:1569-1","title":"Security update for python-Pillow","description":"\nThis update for python-Pillow fixes the following security issues:\n\n* CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening\n  FLI files. (bsc#965582)\n* CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of\n  memory to be overwritten when opening a specially crafted invalid TIFF\n  file. (bsc#965579)\n* Fixed an integer overflow in Resample.c causing writes in the Python heap.\n* Fixed a buffer overflow in PcdDecode.c causing a segfault when opening\n  PhotoCD files.\n","status":"published","published":"2016-06-14T09:28:36Z","modified":"2026-02-04T02:41:24.69403Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3090-1","title":"Pillow vulnerabilities","description":"\nIt was discovered that a flaw in processing a compressed text chunk in\na PNG image could cause the image to have a large size when decompressed,\npotentially leading to a denial of service. (CVE-2014-9601)\n\nAndrew Drake discovered that Pillow incorrectly validated input. A remote\nattacker could use this to cause Pillow to crash, resulting in a denial\nof service. (CVE-2014-3589)\n\nEric Soroos discovered that Pillow incorrectly handled certain malformed\nFLI, Tiff, and PhotoCD files. A remote attacker could use this issue to\ncause Pillow to crash, resulting in a denial of service.\n(CVE-2016-0740, CVE-2016-0775, CVE-2016-2533)\n\n","status":"published","published":"2016-09-27T19:55:34Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}