Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polygon and ImageDraw.ImageDraw.line could cause a heap buffer overflow, as nested lists were recursively unpacked beyond the allocated buffer. Coordinate lists are now validated to contain exactly two numeric coordinates. This issue has been patched in version 12.2.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | Disclosure1General1 |
| 2026-05-11 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-42309 📊 Severity: 5.1 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42309 #CVE-2026-42309 #CVE #Medium #CyberSecurity #InfoSec https://t.co/acA2sCiQAO
Post summary
The tweet announces CVE-2026‑42309 with a medium 5.1 CVSS score, but offers no further exploitation, PoC, or mitigation details.
CVE-2026-42309 Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePat… https://www.cve.org/CVERecord?id=CVE-2026-42309
Post summary
The text offers a brief technical overview of CVE-2026-42309 affecting Pillow 11.2.1–12.1.x, but it does not provide a PoC, exploit, active‑use evidence, patch, or false‑positive claim.
CVE-2026-42309 Heap Buffer Overflow in Pillow Python Imaging Library Versions 11.2.1-12.1.x https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42309
Post summary
The post discloses a heap buffer overflow vulnerability (CVE‑2026‑42309) affecting Pillow Python Imaging Library versions 11.2.1 to 12.1.x, with a link to a vulnerability details page.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | python | pillow | - | - | - |