CVE-2024-28219

Published: Apr 3, 2024

Modified: Nov 4, 2025

PUBLISHED

CVSS v3.1

6.7

MEDIUM

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

CVSS v3.1 Vector

CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R

Attack Complexity

High

Attack Vector

Local

Availability

High

Confidentiality

High

Integrity

High

Privileges Required

Low

Scope

Unchanged

User Interaction

Required

vendor-advisory

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.