GHSA-wjx4-4jcj-g98j
Pillow has an integer overflow when processing fonts
At a glance
- Published
- Updated
- CVE
- CVE-2026-42308
- Aliases
- BIT-pillow-2026-42308, PYSEC-2026-165
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS_V4
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
If a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This has been fixed.
Affected packages
| Package | Versions |
|---|---|
| PyPI · pillow | introduced 0, fixed 12.2.0 |
References
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-42308 ADVISORY
- https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-165.yaml WEB
- https://github.com/python-pillow/Pillow PACKAGE
- https://github.com/python-pillow/Pillow/releases/tag/12.2.0 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |