CVE-2026-96641— Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Quick assessment
Affected
python-pillow Pillow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Pillow 是一个 Python 图像处理库。在 13.0.0 版本之前， 中 PILfont 的文本宽度累加逻辑仅检查正向字形偏移（glyph advances）是否超过 ，却未检查负向偏移是否低于 。因此，若重复使用值为 -32768 的有符号 16 位偏移量，便可在 表达式中触发有符号 C 整数溢出，从而将负数的数学计算结果转换为一个极大的正宽度值。 依赖 、 或其衍生布局、配额、序列化或内存分配计算的应用，可能遭遇逻辑完整性错误或资源耗尽问题；而高层掩码（mask）路径通常仍保留防解压炸弹（decompr
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-96641
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise
Source: CVE Program / CVE List V5
Vulnerability Description
Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative advances against INT_MIN. Repeating a signed 16-bit advance of -32768 can therefore execute a signed C integer overflow in xsize += dx, producing a large positive width from a negative mathematical result. Applications that use getlength(), getsize(), or derived layout, quota, serialization, or allocation calculations can experience logic-integrity errors or resource consumption, while the high-level mask path commonly retains a decompression-bomb check. This issue is fixed in version 13.0.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| python-pillow | Pillow | < 13.0.0 | - |
|
II. Public POCs for CVE-2026-96641
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-96641
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-96641 (2)
Vendor Advisories for CVE-2026-96641 (1)
Vendor Pages for CVE-2026-96641 (1)
-
🔗 Release 13.0.0 · python-pillow/Pillow · GitHub x_refsource_MISC
Same Patch Batch · python-pillow · 2026-10-21 · 11 CVEs total
| CVE-2026-96639 | 9.8 CRITICAL | Pillow multi-frame loaders can reuse stale native image storage after mode transitions |
| CVE-2026-96640 | 8.2 HIGH | Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion |
| CVE-2026-96778 | 7.7 HIGH | Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer |
| CVE-2026-96642 | 7.1 HIGH | Pillow: TarIO negative size field causes infinite CPU-spin loop |
| CVE-2026-96643 | 7.1 HIGH | Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time |
| CVE-2026-96644 | 7.1 HIGH | Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows build |
| CVE-2026-96637 | 7.1 HIGH | Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded all |
| CVE-2026-96638 | 6.5 MEDIUM | Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mod |
| CVE-2026-96636 | 6.5 MEDIUM | Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoIma |
| CVE-2026-114501 | 6.3 MEDIUM | Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1 |
IV. Related Vulnerabilities
Same product: Pillow
-
CVE-2026-114501
Pillow: Arrow export leaks stale heap memory when PILLOW_ALI -
CVE-2026-96639
Pillow multi-frame loaders can reuse stale native image stor -
CVE-2026-96636
Pillow: Decompression-bomb protection bypass via multi-frame -
CVE-2026-96640
Pillow PDF append accepts malformed shared page-tree DAG cau -
CVE-2026-96637
Pillow: Decompression bomb check bypass in SpiderImagePlugin
Same vendor: python-pillow
-
CVE-2026-114501
Pillow: Arrow export leaks stale heap memory when PILLOW_ALI -
CVE-2026-96639
Pillow multi-frame loaders can reuse stale native image stor -
CVE-2026-96636
Pillow: Decompression-bomb protection bypass via multi-frame -
CVE-2026-96640
Pillow PDF append accepts malformed shared page-tree DAG cau -
CVE-2026-96637
Pillow: Decompression bomb check bypass in SpiderImagePlugin
Same weakness: CWE-190
-
CVE-2026-110264
Integer Overflow or Wraparound in GitLab -
CVE-2026-111074
JITServer: Pre-authentication remote Denial of Service via i -
CVE-2026-113681
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2. -
CVE-2026-95107
Module object allocation size overflow corrupts the manager -
CVE-2026-91189
GUIX binary resource loader: unvalidated glyph range causes
V. Comments for CVE-2026-96641
No comments yet