CVE-2024-28219

score

<0.1

cvss

6.7

epss

1.0%

published

2024-04-03

kev added

—

first seen

2026-10-21

_imagingcms.c in Pillow before 10.3.0 contains a buffer overflow caused by the use of strcpy instead of strncpy, letting attackers potentially execute arbitrary code or cause a crash, exploit requires crafted input data.