Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-42308

Pillow: Integer overflow when processing fonts

Description

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

python-pillow Pillow

  • < 12.2.0affected

References