/

Directory Security Advisories Pricing

Security Advisories

CVE-2024-28219

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-28219

Severity

5.9

Medium

CVSS V3

Description

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.