CVE-2026-42308

🗓️ 09 May 2026 04:09:01Reported by AttackerKBType

attackerkb🔗 attackerkb.com👁 15 Views

CVE-2026-42308: Pillow before 12.2.0 may overflow integers from large glyph advances; fixed in 12.2.0.

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin:Pillow Integer Overflow Vulnerability Fixed in Version 12.2.0	4 Aug 202610:04	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-1712)	27 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3312 (ALAS-2026-3312)	27 May 202600:00	–	nessus
Tenable Nessus	Debian dsa-6357 : python-pil-doc - security update	21 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-2559)	10 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-2619)	10 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2751)	21 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.0 : python-pillow (EulerOS-SA-2026-2797)	21 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-2902)	6 Aug 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-2943)	6 Aug 202600:00	–	nessus

Vulners

Node

python-pillow pillowRange<12.2.0

Source	Link
github	www.github.com/python-pillow/Pillow/releases/tag/12.2.0
github	www.github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

09 May 2026 05:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 45.1

EPSS0.00114

Pillow font advances overflow glyphs integer overflow version 12.2.0 patch released