CVE-2026-42311

Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Description

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

Scores

Weaknesses (CWE)

• CWE-190
• CWE-787

Advisories

• GHSA-pwv6-vv43-88gr — Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)
• PYSEC-2026-2252 — Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially r

European references

• ENISA EUVD · EUVD-2026-28903
• GCVE · GCVE-0-2026-42311

CERT-FR advisories

• CERTFR-2026-AVI-1366 — Multiples vulnérabilités dans les produits Splunk · cert.ssi.gouv.fr
• CERTFR-2026-AVI-0627 — Multiples vulnérabilités dans les produits Splunk · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:* ≥ 10.3.0 < 12.2.0

Affected products

References

• https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr
• https://github.com/python-pillow/Pillow/pull/9520
• https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea
• https://github.com/python-pillow/Pillow/releases/tag/12.2.0

Sources