← CVE Intelligence

CVE-2026-25990

Pillow has an out-of-bounds write when loading PSD images PUBLISHED

Description (CNA)

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

Affected (CNA)

Vendor / productVersions
python-pillow / Pillowaffected >= 10.3.0, < 12.1.1

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

redhat-SADP

A flaw was found the Pillow Python imaging library. Providing a specially crafted PSD image may lead to an out-of-bounds write. This could potentially allow for arbitrary code execution or information disclosure.