Pillow affected by out-of-bounds write when loading PSD images

🗓️ 11 Feb 2026 14:22:50Reported by GitHub Advisory DatabaseType

Pillow 10.3.0 and later are vulnerable to out-of-bounds writes when loading PSD images; fix in 12.1.1.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses pillow-12.1.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-25990.	30 Mar 202607:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses pillow-10.3.0-cp39-cp39-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-25990.	16 Apr 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	30 Apr 202612:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pillowy affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	4 May 202614:25	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.	6 May 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pillow-11.3.0 which is vulnerable to CVE-2026-25990	27 May 202615:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in Python Pillow [CVE-2026-25990]	14 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	16 Mar 202613:27	–	ibm
ATTACKERKB	CVE-2026-25990	11 Feb 202620:53	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-1452)	6 Mar 202600:00	–	nessus

Vulners

Node

python pillowRange10.3.0–12.1.1pip

Source	Link
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc
github	www.github.com/python-pillow/Pillow/pull/9427
github	www.github.com/python-pillow/Pillow/commit/54ba4db542ad3c7b918812a4e2d69c27735a3199
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25990
github	www.github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa
github	www.github.com/advisories/GHSA-cfh3-3jmp-rvhc

30 Apr 2026 20:14Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.17.5

CVSS 48.6

EPSS0.00014

SSVC

CWE-787