CVE-2026-96640 - Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion
CVE ID :CVE-2026-96640 Published : Oct. 21, 2026, 9:20 p.m. | 46 minutes ago Description :Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references....