Pillow Buffer overflow in ImagingFliDecode

published 2016-04-13 10 y ago modified 2026-06-17 4 mo ago also GHSA-8xjv-v9xq-m5h9 , PYSEC-2016-6 , EUVD-2016-0022

cvss: 6.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.5%; EPSS 2.5% chance of exploitation in 30 days, percentile 84%
public exploits: 0; none known

Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

Patch / fix

fixed in 1 distros 4 links 1

pypi pillow 3.1.1

debian ubuntu suse opensuse

pillow Debian 14, Debian 13, Debian 12 3.1.1-1

debian advisories DEBIAN-CVE-2016-0775

pillow Ubuntu 14.04 LTS 2.3.0-1ubuntu3.2

ubuntu advisories UBUNTU-CVE-2016-0775

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

ansible OpenStack Cloud 7 2.2.3.0-17.2
grafana OpenStack Cloud 7 6.7.4-1.17.1
crowbar-core OpenStack Cloud 7 4.0+git.1600767499.0615a418f-9.69.3
python-Pillow OpenStack Cloud 7 2.8.1-4.17.2
openstack-aodh OpenStack Cloud 7 3.0.5~dev2-2.11.2
openstack-heat OpenStack Cloud 7 7.0.7~dev10-5.17.3
openstack-nova OpenStack Cloud 7 14.0.11~dev13-4.45.3
openstack-cinder OpenStack Cloud 7 9.1.5~dev6-4.28.1

suse advisories SUSE-SU-2020:2911-1 SUSE-SU-2020:2057-1 SUSE-SU-2016:1569-1 SUSE-SU-2016:1355-1 SUSE-SU-2016:0935-1 SUSE-SU-2016:0924-1

python-Pillow openSUSE Tumbleweed 12.3.0-1.1
python-Pillow openSUSE Tumbleweed 3.4.2-1.1
python-Pillow openSUSE Tumbleweed 3.1.1-4.1
python-Pillow openSUSE Tumbleweed 8.3.2-1.2
python-Pillow openSUSE Tumbleweed 10.3.0-1.1

opensuse advisories openSUSE-SU-2026:11261-1 openSUSE-SU-2024:10511-1 openSUSE-SU-2024:10567-1 openSUSE-SU-2024:11209-1 openSUSE-SU-2024:13827-1

github.com/python-pillow/Pillow@893a408 commit

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-0775 updated 2026-11-07 cvss 5.1

python-pillow: Buffer overflow in FliDecode.c

Red Hat Enterprise Linux 5 python-imaging Red Hat Enterprise Linux 6 python-imaging, python-imaging-tk, python-imaging-sane Red Hat Enterprise Linux 7 python-pillow, python-pillow-qt, python-pillow-tk, python-pillow-sane
affected: no fix planned “Will not fix”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.52% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	3.0	6.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:N/I:N/A:P
GitHub	3.0	6.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	pillow	<3.1.1	3.1.1

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

github.com /python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b
web, patch
security.gentoo.org /glsa/201612-52
vendor-advisory, web, advisory
debian.org /security/2016/dsa-3499
vendor-advisory, web, advisory
github.com /python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
web
nvd.nist.gov /vuln/detail/CVE-2016-0775
advisory
github.com /advisories/GHSA-8xjv-v9xq-m5h9
advisory
github.com /pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2016-6.yaml
web
github.com /python-pillow/Pillow
package

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary