CVE-2026-96639

Summary

A memory corruption flaw in Pillow versions 11.0.0–13.0.0 allows attackers to trigger out-of-bounds writes (CWE-787) and reads (CWE-125) when processing multi-frame images like PSD, MPO, DCX, or MIC. The vulnerability arises when frame mode/size changes between frames but the internal buffer is reused without validation, enabling crafted files to overwrite memory beyond allocated bounds.

Exploitability

Exploitation requires delivering a specially crafted multi-frame image file to an application using Pillow; no authentication or user interaction is needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), and public PoCs exist, indicating low effort to exploit.

Blast radius

Successful exploitation could lead to remote code execution (demonstrated in MPO path), data exfiltration, or service crashes, affecting any system processing untrusted images via Pillow.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Pillow to version 13.0.0 or later, as this issue is fixed in that release.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.