CVE-2026-96636 | python-pillow Pillow up to 12.x MPO/DCX Frame MpoImageFile.seek/DcxImageFile.seek resource consumption

October 21, 2026 Yanac

A vulnerability identified as problematic has been detected in python-pillow Pillow up to 12.x. Affected by this vulnerability is the function MpoImageFile.seek/DcxImageFile.seek of the component MPO/DCX Frame Handler. Performing a manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-96636. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More