CVE-2026-42308

EUVD-2026-28900
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 1.68%
Affected Products (NVD)
VendorProductVersion
pythonpillow
𝑥
< 12.2.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
pillow
bookworm
postponed
bookworm (security)
vulnerable
bullseye
postponed
bullseye (security)
vulnerable
forky
12.3.0-1
fixed
sid
12.3.0-1
fixed
trixie
11.1.0-5+deb13u4
fixed
trixie (security)
11.1.0-5+deb13u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pillow
bionic
needs-triage
focal
needs-triage
jammy
Fixed 9.0.1-1ubuntu0.4
released
noble
Fixed 10.2.0-1ubuntu1.2
released
questing
Fixed 11.3.0-1ubuntu1.3
released
resolute
Fixed 12.1.1-2ubuntu1.2
released
trusty
needs-triage
xenial
needs-triage
pillow-python2
focal
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
python311-Pillow
suse enterprise desktop 15 SP7
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP4
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP5
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP6
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP7
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP4
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP5
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP6
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP7
9.5.0-150400.5.20.1
fixed
python311-Pillow-tk
suse enterprise desktop 15 SP7
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP4
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP5
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP6
9.5.0-150400.5.20.1
fixed
suse enterprise sap 15 SP7
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP4
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP5
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP6
9.5.0-150400.5.20.1
fixed
suse enterprise server 15 SP7
9.5.0-150400.5.20.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python-pillow
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
python-pillow-debuginfo
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python-pillow-debugsource
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python-pillow-devel
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
python-pillow-doc
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
python-pillow-sane
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
python-pillow-tk
Amazon Linux 2
0:2.0.0-23.gitd1c6db8.amzn2.0.18
fixed
python3-pillow
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python3-pillow-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python3-pillow-devel
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python3-pillow-tk
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
python3-pillow-tk-debuginfo
Amazon Linux 2023
0:9.4.0-2.amzn2023.0.8
fixed
Common Weakness Enumeration
References
https://github.com/python-pillow/Pillow/releases/tag/12.2.0
https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j