Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-25990

Опубликовано: 11 фев. 2026
Источник: nvd
CVSS3: 7.5
CVSS3: 7.3
EPSS Низкий

Описание

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*
Версия от 10.3.0 (включая) до 12.1.1 (исключая)

EPSS

Процентиль: 29%
0.00367
Низкий

7.5 High

CVSS3

7.3 High

CVSS3

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

CVSS3: 7.3
redhat
6 месяцев назад

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

CVSS3: 7.5
debian
6 месяцев назад

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an o ...

suse-cvrf
4 месяца назад

Security update for python-Pillow

github
6 месяцев назад

Pillow affected by out-of-bounds write when loading PSD images

EPSS

Процентиль: 29%
0.00367
Низкий

7.5 High

CVSS3

7.3 High

CVSS3

Дефекты

CWE-787
CWE-787