CVE-2019-19777

2019-12-1302:15:10

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.2%

JSON

stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.

CPENameOperatorVersion
libsixeleq1.7.0
libsixeleq1.4.9
libsixeleq0.25.0
libsixeleq0.17.1
libsixeleq0.19.3
libsixeleq1.4.4
libsixeleq1.3.4
libsixeleq1.2.3
libsixeleq1.4.11
libsixeleq1.6.0

Name	Operator	Version
libsixel	eq	1.7.0
libsixel	eq	1.4.9
libsixel	eq	0.25.0
libsixel	eq	0.17.1
libsixel	eq	0.19.3
libsixel	eq	1.4.4
libsixel	eq	1.3.4
libsixel	eq	1.2.3
libsixel	eq	1.4.11
libsixel	eq	1.6.0