1 matches found
Pillow numeric error vulnerability
Versions of Pillow prior to 13.0.0 contain a numeric error vulnerability. This vulnerability stems from the lack of validation for negative glyph steps when summing the width of PILfont text in src/imaging.c. Repeating signed 16-bit steps of -32768 can lead to integer overflow, potentially...
6.5CVSS5.9AI score0.00345EPSS
SaveExploits0References5
20