Most recent entries from all

bdu:2026-10818

BIT-pillow-2026-42311 — Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Affected: Bitnami: pillow

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.

BREW-aider-CVE-2026-42311 — Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Affected: Homebrew: aider

### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.

### Patches Patched version: 12.2.0

Pillow 12.1.1 addressed CVE-2026-25990 by adding checks for tile extents in PSD image decoding/encoding to prevent an out-of-bounds write. However, the bounds checks computed tile extent sums using types susceptible to integer overflow, meaning a PSD image with carefully chosen tile dimensions could produce values that wrap around and bypass the checks, still triggering an out-of-bounds write in src/decode.c and src/encode.c. The fix avoids adding extents together before comparison.

### Workarounds Use any version but affected versions: >= 10.3.0, < 12.2.0

### Resources - Fix: https://github.com/python-pillow/Pillow/pull/9520 - Original issue: CVE-2026-25990 (Pillow 12.1.1)

certfr-2026-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq…

certfr-2026-avi-0627

CLEANSTART-2026-AG94767 — Security fix for CVE-2026-42311 applied in: apache-superset 6.0.0-r5

Affected: CleanStart: apache-superset

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-316834

fkie_cve-2026-42311

GHSA-pwv6-vv43-88gr — Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Affected: PyPI: pillow

### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.

### Patches Patched version: 12.2.0

### Workarounds Use any version but affected versions: >= 10.3.0, < 12.2.0

### Resources - Fix: https://github.com/python-pillow/Pillow/pull/9520 - Original issue: CVE-2026-25990 (Pillow 12.1.1)

OESA-2026-2428 — python-pillow security update

Affected: openEuler:24.03-LTS: python-pillow

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. of CVE-2022-22815,CVE-2022-22816) Security Fix(es):

openSUSE-SU-2026:11261-1 — python313-Pillow-12.3.0-1.1 on GA media

python313-Pillow-12.3.0-1.1 on GA media

PYSEC-2026-2252

Affected: PyPI: pillow

RHSA-2026:16008 — Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)

libxslt: Processing web content may disclose sensitive information gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing python: Python: Command-line option injection in webbrowser.open() via crafted URLs libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image giflib: Giflib: Double-free vulnerability leading to memory corruption vim: Vim: Arbitrary code execution via 'helpfile' option processing nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin vim: Vim: Denial of service and information disclosure via crafted swap file vim: Vim: Arbitrary code execution via command injection in glob() function Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow: Pillow: Denial of Service via integer overflow in font processing Pillow: Pillow: Den…

SUSE-SU-2026:22626-1 — Security update for python-Pillow

Security update for python-Pillow

UBUNTU-CVE-2026-42311

Affected: Ubuntu:Pro:20.04:LTS: pillow-python2, Ubuntu:25.10: pillow, Ubuntu:26.04:LTS: pillow

WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Drittanbietern in Oracle Solaris ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.