Threats tagged 'bit-pillow-2026-96641'

Pillow versions prior to 13.0.0 contain a vulnerability in the PILfont text-width accumulation logic where negative glyph advances are not properly checked, leading to signed integer overflow. This can cause logic errors or excessive resource consumption in applications using text size or layout calculations. The issue is fixed in version 13.0.0.