CVE-2026-112399

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OPPREVIO...

CVE-2026-112399 Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OPPREVIO...

CVE-2026-112399

The Pillow Python imaging library (versions 8.1.0 through 13.0.0 ) is vulnerable to a memory exhaustion Denial of Service (DoS) when processing APNG images. The root cause is that the library allocates memory for the full canvas size during Image.open() before performing the decompression-bomb ch...