CVE-2026-96638 Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

The Pillow Python imaging library (versions 9.1.0 through 13.0.0 ) is vulnerable to a memory-exhaustion denial of service due to a flaw in the BmpRleDecoder.decode() function located in src/PIL/BmpImagePlugin.py. The root cause is the lack of a per-branch cap on crafted RLE BMP delta escapes and ...