Threats tagged 'brew-aider-cve-2026-96640'

Pillow's PDF append functionality is vulnerable to a resource exhaustion issue caused by processing a malformed PDF page tree. An attacker can supply a crafted PDF with repeated references in the /Pages tree, causing Pillow to exponentially expand page references during append operations. This leads to excessive CPU consumption before normal completion. The vulnerability affects Pillow versions from 5.1.0 onward, including the latest tested release 12.3.0 and development versions. No fix is currently known.