In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
No PoCs from references.
- https://github.com/daniellakn/prvs
- https://github.com/egilewski/29381
- https://github.com/egilewski/29381-1