Search: CVE-2026-96641

CVE-2026-96641 is an integer overflow vulnerability in the python-pillow Pillow library prior to version 13.0.0. The flaw occurs in the PILfont text-width accumulation code where negative glyph advances are not properly checked against INT_MIN, allowing a signed 16-bit advance of -32768 to cause an integer overflow. This results in a large positive width from a negative calculation, potentially causing logic errors or excessive resource consumption in applications using text layout or size calculations. The issue is fixed in Pillow version 13.0.0.