CVE-2026-96637 | Pillow up to 12.x Spider Image Plugin SpiderImagePlugin.py SpiderImageFile.seek allocation of resources

October 21, 2026 Yanac

A vulnerability labeled as problematic has been found in Pillow up to 12.x. Affected by this issue is the function SpiderImageFile.seek of the file src/PIL/SpiderImagePlugin.py of the component Spider Image Plugin. Executing a manipulation can lead to allocation of resources.

This vulnerability appears as CVE-2026-96637. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More