Threats tagged 'bit-pillow-2026-96643'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.4%	CVE-2026-96643Pillow · PNG eXIf chunk makes EXIF parsing run in quadratic time High7.1EPSS 0.4%2026-10-29GCVE DatabaseCVE-2026-96643 A vulnerability in the Pillow Python imaging library versions 11.0.0 through 12.x causes EXIF parsing to run in quadratic time when processing PNG files with specially crafted eXIf chunks. This leads to excessive CPU consumption during common image operations involving EXIF data, such as photo rotation. The issue is fixed in version 13.0.0. EPSS 0.4%Report on CVE-2026-96643 Vulnerability #bit-pillow-2026-96643 #bitnami	GCVE Database	2026-10-29

Page 1 of 1