Memory Corruption Vulnerability in Pillow Python Imaging Library

CVE-2026-42311

What is CVE-2026-42311?

The Pillow library, a widely used Python imaging tool, has been found to be susceptible to a vulnerability when processing a maliciously crafted PSD file. This defect can lead to memory corruption, which may result in unexpected application crashes or allow for arbitrary code execution. Users are strongly advised to upgrade to version 12.2.0 or later, where this issue has been effectively addressed. For detailed information on the vulnerability and patches, refer to the official advisory and release notes.

References