Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/10/20 4:00 p.m.•3 views

Pillow numeric error vulnerability

Versions of Pillow prior to 13.0.0 contain a numeric error vulnerability. This vulnerability stems from the lack of validation for negative glyph steps when summing the width of PILfont text in src/imaging.c. Repeating signed 16-bit steps of -32768 can lead to integer overflow, potentially...

6.5CVSS5.9AI score0.00345EPSS
SaveExploits0References5
Rows per page
Query Builder