CVE-2026-96643 | python-pillow Pillow up to 12.x Exif src/PIL/Image.py Exif.load resource consumption

October 21, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x. It has been classified as problematic. The impacted element is the function Exif.load of the file src/PIL/Image.py of the component Exif. The manipulation leads to resource consumption.

This vulnerability is listed as CVE-2026-96643. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More