CVE-2026-25990 - Pillow has an out-of-bounds write when loading PSD images

CVE-2026-25990 - Pillow has an out-of-bounds write when loading PSD images

CVE ID : CVE-2026-25990 Published : Feb. 11, 2026, 8:53 p.m. | 35 minutes ago Description : Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
Feb. 11, 2026
Affected Product: Python