CVE-2026-96640
Fixed in a distro release EPSS <1%CVSS 8.2
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format="PDF", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.
Products: python-pillow Pillow
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | pillow | 13.0.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | mlflow | no fix |
| Chainguard | mlflow-fips | no fix |
| Chainguard | nemo-gym | 0.5.0_rc0_git20260729-r6 |
| Chainguard | nemo-rl-cuda-13.0 | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-automodel | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-mcore | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-sglang | 0.7.0-r11 |
| Chainguard | nemo-rl-cuda-13.0-vllm | 0.7.0-r11 |
| Chainguard | nemo-skills | no fix |
| Chainguard | open-webui | no fix |
| Chainguard | py3.10-pytorch-cuda-12.6 | no fix |
| Chainguard | py3.10-pytorch-cuda-13.0 | no fix |
| Chainguard | py3.10-pytorch-cuda-13.2 | no fix |
| Chainguard | py3.10-vllm-cuda-12.4 | no fix |
| Chainguard | py3.11-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.12-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.13-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | py3.14-pytorch-cuda-13.0 | 2.14.1-r2 |
| Chainguard | superset-fips-6.1 | 6.1.0-r11 |
| Debian 12 | pillow | no fix |
| Debian 13 | pillow | no fix |
| Debian 14 | pillow | no fix |
| Ubuntu 22.04 LTS | pillow | no fix |
| Ubuntu 24.04 LTS | pillow | no fix |
| Ubuntu 26.04 LTS | pillow | no fix |
| Ubuntu 26.10 | pillow | no fix |
| Ubuntu Pro 14.04 LTS | pillow | no fix |
| Ubuntu Pro 16.04 LTS | pillow | no fix |
| Ubuntu Pro 18.04 LTS | pillow | no fix |
| Ubuntu Pro 20.04 LTS | pillow | no fix |
| Ubuntu Pro 20.04 LTS | pillow-python2 | no fix |
| Wolfi | mlflow | no fix |
| Wolfi | open-webui | no fix |
| openSUSE Tumbleweed | python-Pillow | 13.0.0-2.1 |