CVE-2024-28219

ADVISORY - github

Summary

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

EPSS Score⁠: 0.00284 (0.515)

ADVISORY - nist

Integer Overflow to Buffer Overflow

ADVISORY - github

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Use of Potentially Dangerous Function

Integer Overflow to Buffer Overflow

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Use of Potentially Dangerous Function

Integer Overflow to Buffer Overflow

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Improper Input Validation

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.