https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T06:47:00.607384+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-28219 CVE-2024-28219 2026-10-11T06:47:00.749496+00:00

Affected: fedoraproject fedora, python pillow, debian_linux

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

 https://vulnerability.circl.lu/vuln/usn-6744-1 USN-6744-1 — pillow vulnerability 2026-10-11T06:47:00.749646+00:00

Affected: Ubuntu:Pro:14.04:LTS: pillow, Ubuntu:Pro:16.04:LTS: pillow, Ubuntu:Pro:18.04:LTS: pillow, Ubuntu:20.04:LTS: pillow, Ubuntu:22.04:LTS: pillow

Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an ICC file, which could lead to a buffer overflow. If a user or automated system were tricked into processing a specially crafted ICC file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code.