Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-42308

Опубликовано: 09 мая 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

РелизСтатусПримечание
devel

pending

12.3.0-1
esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

released

9.0.1-1ubuntu0.4
noble

released

10.2.0-1ubuntu1.2
questing

released

11.3.0-1ubuntu1.3
resolute

released

12.1.1-2ubuntu1.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 2%
0.00114
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.2
redhat
3 месяца назад

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

CVSS3: 5.5
nvd
3 месяца назад

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0.

CVSS3: 5.5
debian
3 месяца назад

Pillow is a Python imaging library. Prior to version 12.2.0, if a font ...

suse-cvrf
2 месяца назад

Security update for python-Pillow

CVSS3: 4
redos
20 дней назад

Уязвимость python-pillow

EPSS

Процентиль: 2%
0.00114
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2026-42308