Read the docs
TI-2026-21005 Aliases CVE-2026-25990GHSA-cfh3-3jmp-rvhc

Pillow has an out-of-bounds write when loading PSD images

Priority MEDIUM 45CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 18 fixed, 6 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00403 34th percentileScored 2026-11-07
Fix Partial Pillow (python-pillow): 12.1.1pillow (PyPI): 12.1.1Red Hat: 21 advisoriesRed Hat: 18 fixed, 6 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
python-pillowPillow10.3.0 to before 12.1.112.1.1Patch availableCNA
—pillow (PyPI)10.3.0 to before 12.1.112.1.1Patch availableGHSA-cfh3-3jmp-rvhc
  • Pillow Vendorpython-pillow Affected 10.3.0 to before 12.1.1 Fixed in 12.1.1 Patch available CNA
  • pillow (PyPI) Vendor— Affected 10.3.0 to before 12.1.1 Fixed in 12.1.1 Patch available GHSA-cfh3-3jmp-rvhc

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*10.3.0 to before 12.1.1Vulnerablepython-pillow
  • cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:* Versions 10.3.0 to before 12.1.1 Vulnerable ·python-pillow

Remediation

  • Fix · CNA Pillow (python-pillow) Fixed in 12.1.1
  • Fix · GHSA-cfh3-3jmp-rvhc pillow (PyPI) Fixed in 12.1.1 Advisory →

Red Hat 21 advisories

  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:28385 Released 2026-06-23 · Red Hat rating Important
    Satellite 6.18.6 Async Update
    • Red Hat Satellite 6.18 for RHEL 9 candlepin-4.6.6-1.el9sat, candlepin-selinux-4.6.6-1.el9sat, dynflow-utils-2.0.1-1.el9sat +1
  • RHSA-2026:19712 Released 2026-05-20 · Red Hat rating Critical
    RHOAI 3.3.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +33
Show 18 more Red Hat advisories
  • RHSA-2026:16174 Released 2026-05-12 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:14874 Released 2026-05-07 · Red Hat rating Important
    Satellite 6.16.8 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 candlepin-4.4.25-1.el8sat, candlepin-selinux-4.4.25-1.el8sat, python-markdown-3.8.2-1.el8pc +6
    • Red Hat Satellite 6.16 for RHEL 9 candlepin-4.4.25-1.el9sat, candlepin-selinux-4.4.25-1.el9sat, python-markdown-3.8.2-1.el9pc +6
  • RHSA-2026:14873 Released 2026-05-07 · Red Hat rating Important
    Satellite 6.17.8 Async Update
    • Red Hat Satellite 6.17 for RHEL 9 candlepin-4.4.25-1.el9sat, candlepin-selinux-4.4.25-1.el9sat, python-markdown-3.8.2-1.el9pc +6
  • RHSA-2026:10184 Released 2026-04-23 · Red Hat rating Important
    RHOAI 2.25.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:6568 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.15.4
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:6567 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6497 Released 2026-04-02 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6404 Released 2026-04-01 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/gateway-rhel9, registry.redhat.io/ansible-automation-platform-26/hub-rhel9, registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9 +2
  • RHSA-2026:6309 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/gateway-rhel9, registry.redhat.io/ansible-automation-platform-26/hub-rhel9, registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9 +2
  • RHSA-2026:6308 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Container Release Update
    • Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8, registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8
  • RHSA-2026:6278 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-gateway-proxy-2.5.10-4.el8ap, automation-gateway-proxy-server-2.5.10-4.el8ap, python3.12-pillow-12.1.1-1.el8ap
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-gateway-proxy-2.6.14-1.el9, automation-gateway-proxy-server-2.6.14-1.el9, python3.12-pillow-12.1.1-1.el9ap
  • RHSA-2026:6277 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-gateway-proxy-2.6.14-1.el9, automation-gateway-proxy-server-2.6.14-1.el9, automation-platform-ui-2.6.7-1.el9ap +1
  • RHSA-2026:5665 Released 2026-03-24 · Red Hat rating Important
    Red Hat Quay 3.10.19
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:5168 Released 2026-03-19 · Red Hat rating Important
    Red Hat Quay 3.9.19
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:4942 Released 2026-03-18 · Red Hat rating Important
    Red Hat Quay 3.12.15
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:4128 Released 2026-03-09 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:3462 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:3461 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
OpenShift LightspeedAffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat AI Inference Server 3.2Fixed RHSA-2026:3461, RHSA-2026:3462, RHSA-2026:4128
Red Hat AI Inference Server 3.3Fixed RHSA-2026:16174
Red Hat Ansible Automation Platform 2.5Fixed RHSA-2026:6308
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:6278
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:6278
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:6309
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:6277
Red Hat OpenShift AI 2.25Fixed RHSA-2026:10184, RHSA-2026:42644
Red Hat OpenShift AI 3.3Fixed RHSA-2026:19712
Red Hat Quay 3.10Fixed RHSA-2026:5665
Red Hat Quay 3.12Fixed RHSA-2026:4942
Red Hat Quay 3.15Fixed RHSA-2026:6568
Red Hat Quay 3.16Fixed RHSA-2026:6497, RHSA-2026:6567
Red Hat Quay 3.9Fixed RHSA-2026:5168
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:14874
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:14874
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:14873
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:28385
Not affected: 21 products
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-25990
  2. 2026-10-03 Alias added: GHSA-cfh3-3jmp-rvhc
  3. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat

References

Patch 2

Advisory 2

Other 4

  • TI-2026-76627 Out-of-bounds read in Pillow TIFF encoder ColorMap handling CVSS 4.0HIGH 8.8
  • TI-2026-76625 Quadratic-time denial of service in Pillow PDF save_all CVSS 4.0HIGH 8.7
  • TI-2026-76605 NULL pointer dereference in Pillow's Image.merge function CVSS 4.0HIGH 8.7
  • TI-2026-76604 Out-of-bounds read in Pillow TIFF decoding leaks heap memory CVSS 4.0HIGH 8.8
  • TI-2026-76602 Double free in Pillow ImagingScaleAffine on allocation failure CVSS 4.0HIGH 8.7
  • TI-2026-76600 GIF seek in Pillow keeps rejected size, allowing denial of service CVSS 4.0HIGH 8.7
See all 110 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences