CVE WATCH / VULNERABILITY DETAIL
CVE-2026-96639
CRITICALCVSS 9.8NVD feed
Published 21 October 2026 · tracked since 22 October 2026
Description
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-114724 HIGH 7.4
- CVE-2026-114715 MEDIUM 6.8
- CVE-2026-114658 HIGH 8.8
- CVE-2026-114636 HIGH 8.7
- CVE-2026-114638 HIGH 8.7
- CVE-2026-114640 HIGH 8.7
- CVE-2026-114577 HIGH 7.3
- CVE-2026-12664 MEDIUM 6.8
- CVE-2026-15723 HIGH 8.2
- CVE-2026-110264 CRITICAL 10