Threats tagged 'brew-aider-cve-2026-96641'

Pillow 12.3.0 contains a reachable undefined behavior in native integer operations within its text width calculation code. Specifically, the code fails to check for integer underflow when summing glyph advance widths, which can cause signed integer overflow and lead to incorrect width calculations. This may result in denial of service or logic errors in applications relying on these width values.