The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
GHSA-v9pv-5gc8-w2m6: Pillow multi-frame loaders can reuse stale native image storage after mode transitions
- Identifiers
- CVE-2026-96639GHSA-v9pv-5gc8-w2m6
- Published
- Record updated
- Affected
- Pillow >= 11.0.0, < 13.0.0
- Fixed in
- 13.0.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
Pillow 12.3.0 multi-frame loaders (PSD, MPO/JPEG, DCX, MIC) can reuse native ImagingCore storage allocated for an earlier frame after the frame's mode changes, for example from L to RGB or CMYK. The mismatch causes native out-of-bounds writes, over-reads and process crashes. The author also reports harmless-marker command execution through the MPO/JPEG path via ImageSequence.Iterator and frame.load().
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- pillowPyPINo LLM dependency detected · 180 tracked dependents