CVE-2016-0775: Buffer overflow in ImagingFliDecode

April 13, 2016 (updated June 30, 2017)

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

References

www.cvedetails.com/cve/CVE-2016-0775/
github.com/python-pillow/Pillow/blob/3.1.x/CHANGES.rst
github.com/python-pillow/Pillow/commit/bcaaf97f4ff25b3b5b9e8efeda364e17e80858ec

Detect and mitigate CVE-2016-0775 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →