CVE-2016-4009

CVE-2016-4009 is an integer overflow vulnerability in the Pillow library (versions prior to 3.1.1) that affects Python applications. Specifically, the ImagingResampleHorizontal function can be exploited by providing negative values for image resizing, leading to a heap-based buffer overflow. This vulnerability carries a critical CVSS score of 9.8, indicating it is easily exploitable over the network with no user interaction, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 10 mentions across various platforms.