CVE-2016-3076

Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory…

published April 24, 2017

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02583 · 85.0th percentile
Published
2017-04-24T18:00Z
EPSS history
Timeline
  • 24 APR 18:00Z
    Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory…
    cvelistv5