---
cve: "CVE-2026-96639"
severity: "CRITICAL"
cvss: 9.8
epss: ""
vendor: "python-pillow"
kev: false
exploited: false
published: "2026-10-21 21:20:32"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-25T15:04:24+01:00"
---

# CVE-2026-96639

> 9.8 CRITICAL · 🧪 PoC

## Beschreibung

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.

## CNA-Record (Kanon, cvelistV5)

- CNA: **GitHub_M**
- State: PUBLISHED
- Stand: 2026-10-21 21:06:42
- CNA-CVSS: **9.8** (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`)

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-125** — Out-of-bounds Read
  The product reads data past the end, or before the beginning, of the intended buffer.
- **CWE-787** — Out-of-bounds Write
  The product writes data past the end, or before the beginning, of the intended buffer.

## Angriffsmuster (CAPEC)

- [CAPEC-540 — Overread Buffers](https://capec.mitre.org/data/definitions/540.html) _(Severity: High)_

## Patch verfügbar (OSV)

- 293218ad059d994baf1777d882911bed6a49704a (Commit)
- 78d97d994579aef81aafe123773d525f40f2522a (Commit)

## Referenzen

- <https://github.com/python-pillow/Pillow/security/advisories/GHSA-v9pv-5gc8-w2m6>
- <https://github.com/python-pillow/Pillow/pull/10105>
- <https://github.com/python-pillow/Pillow/commit/78d97d994579aef81aafe123773d525f40f2522a>
- <https://github.com/python-pillow/Pillow/releases/tag/13.0.0>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-96639/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_