PYSEC-2026-4342
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/pillow/PYSEC-2026-4342.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-4342
- Aliases
- Published
- 2026-10-21T21:20:32Z
- Modified
- 2026-10-28T11:00:02Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(), including common photo-upload rotation workflows. This issue is fixed in version 13.0.0.
- References
Affected packages
PyPI / pillow
Package
- Name
- pillow
- View open source insights on deps.dev
- Purl
- pkg:pypi/pillow