CVE-2026-96641 | python-pillow Pillow up to 12.x PILfont src/_imaging.c integer overflow

October 21, 2026 Yanac

A vulnerability classified as problematic has been found in python-pillow Pillow up to 12.x. Affected by this issue is some unknown functionality of the file src/_imaging.c of the component PILfont. The manipulation leads to integer overflow.

This vulnerability is uniquely identified as CVE-2026-96641. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More