USN-8047-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 17 Feb 2026, 12:52
Last modified:24 Jul 2026, 15:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Feb 2026, 12:52
Published
Vulnerability first disclosed
24 Jul 2026, 15:33
Last Modified
Vulnerability information updated

Description

pillow vulnerability Yarden Porat discovered that Pillow incorrectly handled certain malformed PSD images. An attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly execute arbitrary code.

Affected Systems

  • ubuntu•pillow

    < 11.3.0-1ubuntu1.1

References (2)