CVE-2024-28219

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy

Medium · published April 3, 2024

CVSS v3.1
6.7
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00997 · 62.4th percentile
Published
2024-04-03T00:00Z
EPSS history
Timeline
  • 03 APR 00:00Z
    In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy
    cvelistv5