CVE-2016-0740: Buffer overflow in ImagingLibTiffDecode

April 13, 2016 (updated June 30, 2017)

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c allows remote attackers to overwrite memory via a crafted TIFF file.

References

www.cvedetails.com/cve/CVE-2016-0740/
github.com/python-pillow/Pillow/blob/3.1.x/CHANGES.rst
github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e

Detect and mitigate CVE-2016-0740 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →