CVE-2016-9189

Several security issues were fixed in the Python Imaging Library ...

Several security issues were fixed in Pillow ...

Cris Neckar discovered multiple vulnerabilities in Pillow, a Python imaging library, which may result in the execution of arbitrary code or information disclosure if a malformed image file is processed For the stable distribution (jessie), these problems have been fixed in version 261-2+deb8u3 For the testing distribution (stretch), these probl ...

Pillow before 332 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Imagecoremap_buffer in mapc component (CVE-2016-9189) ...

A memory disclosure vulnerability was found in python-pillow Functions in mapc failed to check for image overflow and check that an offset parameter was within bounds, allowing a crafted image to cause a crash or disclosure of memory ...