PT-2026-117659

Name of the Vulnerable Software and Affected Versions Pillow versions 5.4.0 through 12.11.0 Description Pillow performs quadratic copying when parsing GIF comments. The GifImageFile. seek function repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame...