CVE-2026-96640 | Python Pillow up to 12.x PdfParser src/PIL/PdfParser.py PdfParser.linearize_page_tree resource consumption

October 21, 2026 Yanac

A vulnerability described as problematic has been identified in Python Pillow up to 12.x. This vulnerability affects the function PdfParser.linearize_page_tree of the file src/PIL/PdfParser.py of the component PdfParser. The manipulation results in resource consumption.

This vulnerability is known as CVE-2026-96640. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More