Pillow versions from 11.0.0 up to but not including 13.0.0 contain a vulnerability in multi-frame image loaders where stale native image storage is reused after mode transitions. This can cause out-of-bounds writes and crashes, and in some cases, native over-reads leading to potential command execution. The issue is fixed in version 13.0.0.