CVE-2026-25990

EUVD-2026-6218
Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 30.03%
Affected Products (NVD)
VendorProductVersion
pythonpillow
10.3.0 ≤
𝑥
< 12.1.1
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 8
0:12.1.1-1.el8ap ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 9
0:12.1.1-1.el9ap ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 9
0:12.1.1-1.el9ap ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.16 for RHEL 8
0:12.1.1-1.el8pc ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.16 for RHEL 9
0:12.1.1-1.el9pc ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.17 for RHEL 9
0:12.1.1-1.el9pc ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.18 for RHEL 9
0:12.1.1-1.el9pc ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1772160593 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1772160625 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1772713830 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.3
1778244546 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.5
1774414699 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6
1774417022 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776247907 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776257621 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776243239 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776243238 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776243299 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776243249 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776243309 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776259063 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776336652 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776319193 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776319179 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776319185 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776318795 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776319453 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776336534 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776319275 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1783998774 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1783998857 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778264363 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 3.3
1778600187 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.1
1773971077 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.12
1773771962 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.15
1775169219 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1775069491 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1775169226 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.9
1773936323 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
pillow
bookworm
9.4.0-1.1+deb12u1
fixed
bookworm (security)
9.4.0-1.1+deb12u1
fixed
bullseye
8.1.2+dfsg-0.3+deb11u2
fixed
bullseye (security)
8.1.2+dfsg-0.3+deb11u3
fixed
forky
12.3.0-1
fixed
sid
12.3.0-1
fixed
trixie
11.1.0-5+deb13u4
fixed
trixie (security)
11.1.0-5+deb13u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pillow
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
questing
Fixed 11.3.0-1ubuntu1.1
released
trusty
not-affected
xenial
not-affected
pillow-python2
focal
not-affected
jammy
dne
noble
dne
questing
dne
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python-pillow
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
python-pillow-debuginfo
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python-pillow-debugsource
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python-pillow-devel
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
python-pillow-doc
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
python-pillow-sane
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
python-pillow-tk
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.17
fixed
python3-pillow
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python3-pillow-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python3-pillow-devel
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python3-pillow-tk
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed
python3-pillow-tk-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.7
fixed