{"id":"ghsa-ghsa-p8hx-v2p6-rp84","seq":309596,"kind":"advisory","title":"Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)","url":"https://github.com/advisories/GHSA-p8hx-v2p6-rp84","permalink":"https://vulnpulse.app/items/ghsa-ghsa-p8hx-v2p6-rp84","summary":"影響: pip:Pillow < 13.0.0 → 13.0.0\nPillow's decompression-bomb protection (Image._decompression_bomb_check, gated by Image.MAX_IMAGE_PIXELS) is enforced only on the first frame, inside Image.open(). For multi-frame formats, seek() re-parses the target frame's header and resets self._size. GifImagePlugin and TiffImagePlugin re-run the bomb check on seek(), but MpoImageFile.seek() and DcxImageFile.seek() do not. A crafted MPO or DCX whose first frame is tiny (passing the check) but whose later frame declares enormous dimensions th…","severity":"medium","techs":["python"],"cves":["CVE-2026-96636"],"tags":["GHSA-p8hx-v2p6-rp84","Pillow"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-22T15:56:37.000Z","fetched_at":"2026-10-22T20:09:55.169Z"}