CVE-2016-2533

—

CVSS 3.0

6.5 medium

EPSS

4%p90

Published

Apr 13, 2016 (Apr 13, 2016)

Modified

Jun 17, 2026

Description

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

Vendors: python python imaging project debian
Products: pillow, python imaging, debian linux
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news0 stories

No ingested article mentions this CVE yet.