Lucene search

K
cvelistMitreCVELIST:CVE-2019-9210
HistoryFeb 27, 2019 - 2:00 p.m.

CVE-2019-9210

2019-02-2714:00:00
mitre
www.cve.org

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)