Skip to content
OpenAdvisories
Medium DSA-3499-1 3 CVEs

pillow - security update

Published Feb 28, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 pillow 2.6.1-2+deb8u2

Vulnerabilities 3

  • Medium 6.5
    CVE-2016-0740

    Pillow Buffer overflow in ImagingLibTiffDecode

    Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-0775

    Pillow Buffer overflow in ImagingFliDecode

    Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-2533

    Pillow buffer overflow in ImagingPcdDecode

    Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

    pillow pillow pillow Debian Ubuntu PyPI