CVE-2026-96644

A flaw was found in Pillow. When processing Windows Metafile (WMF) or Enhanced Metafile (EMF) images on Windows systems, the image parser improperly handles dimension values, allocating an undersized buffer while reading full dimensions. A remote attacker could exploit this vulnerability by enticing an application or user to process a specially crafted metafile, triggering an out-of-bounds memory read that results in a Denial of Service (DoS) via an application crash or potential information disclosure.

Red Hat rates this vulnerability as an Important severity flaw because an unauthenticated remote attacker could cause an application crash or expose heap memory contents by supplying a crafted image file. In Red Hat Enterprise Linux environments, however, the vulnerable native metafile rendering code is compiled out, as the handler is restricted to Windows operating systems. Consequently, standard Red Hat enterprise installations are not susceptible to this memory over-read condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.