CVE-2016-9189

Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer…

published November 4, 2016

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01945 · 80.0th percentile
Published
2016-11-04T10:00Z
EPSS history
Timeline
  • 04 NOV 10:00Z
    Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer…
    cvelistv5