CVE-2026-96641

A flaw was found in Pillow. When processing text dimensions with certain fonts, negative character spacing values are not properly validated during text-width calculation, causing an integer overflow. A remote attacker could exploit this vulnerability by providing crafted text or font data to an application that calculates text layout or dimensions. Successful exploitation could lead to excessive resource allocation, resulting in a Denial of Service (DoS) or application logic errors.

This vulnerability is rated as Moderate impact because successful exploitation typically results in application denial of service or computational discrepancies rather than remote code execution. In typical Red Hat deployments across platforms such as Red Hat Enterprise Linux and OpenShift AI, Pillow is used by backend services and automated pipelines, which rarely expose raw font parsing or text-width metrics directly to unauthenticated external inputs. An attacker must supply specially crafted font files or text strings to an application performing dimension metrics to trigger the integer overflow.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.