CVE-2026-25990 — Pillow has an out-of-bounds write when loading PSD images
Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed…
Published: 2026-02-11 · CVSS: 8.6 · CVSS 4.0
Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7