NVD HIGH: CVE-2026-96778 — Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode()...
Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed i
CVE-2026-96778