CVE-2026-112891

The record

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An attacker can supply an image with a large GIF comment to an application that saves it as GIF. This can consume excessive CPU and delay or deny service. This issue is fixed in version 13.0.0.

Affected packages

Related vulnerabilities

• CVE-2026-19630 In a BIND resolver, inbound DNS protocol messages with a particular structure will result… CWE-407
• CVE-2026-112894 Pillow is a Python imaging library. CWE-407
• CVE-2026-112401 Pillow is a Python imaging library. CWE-407
• CVE-2026-111766 markdown-it is a Markdown parser. CWE-407
• CVE-2026-111759 markdown-it is a Markdown parser. CWE-407
• CVE-2026-95838 containerd is an open-source container runtime. CWE-407
• CVE-2026-104844 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does… CWE-407
• CVE-2026-104182 stream-json is a micro-library of stream components for processing JSON and JSONC with a… CWE-407