Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. PIL
  4. ›
  5. CVE-2016-2533

CVE-2016-2533: Buffer overflow in ImagingPcdDecode

April 13, 2016 (updated June 30, 2017)

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

References

  • www.cvedetails.com/cve/CVE-2016-2533/
  • github.com/python-pillow/Pillow/commit/5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9

Code Behaviors & Features

Detect and mitigate CVE-2016-2533 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions

Solution

Switch to Pillow where the vulnerability has been fixed..

Impact 6.5 MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Learn more about CVSS

Weakness

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Source file

pypi/PIL/CVE-2016-2533.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:16:01 +0000.