Skip to content
OpenAdvisories
High DLA-705-1 2 CVEs

python-imaging - security update

Published Nov 7, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 python-imaging 1.1.7-4+deb7u3

Vulnerabilities 2

  • High 7.8
    CVE-2016-9190

    Arbitrary code using "crafted image file" approach affecting Pillow

    Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2016-9189

    Pillow Integer overflow in Map.c

    Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.

    pillow pillow pillow Debian Ubuntu PyPI