SUSE CVE-2016-4009

Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow...

Integer Overflow

Pillow is vulnerable to integer overflow. A malicious user can pass an image file to the application to cause an integer overflow when resampling it. This can result in a heap-based buffer overflow that can have multiple impacts...