Lucene search

K
osvGoogleOSV:USN-5264-1
HistoryFeb 03, 2022 - 7:55 p.m.

graphviz vulnerabilities

2022-02-0319:55:47
Google
osv.dev
26
graphviz
vulnerabilities
buffer overflow
null pointer dereference
denial of service
arbitrary code execution
cve-2018-10196
cve-2019-11023
cve-2020-18032
specially crafted input file

AI Score

8.4

Confidence

High

EPSS

0.041

Percentile

92.3%

It was discovered that graphviz contains null pointer dereference
vulnerabilities. Exploitation via a specially crafted input file
can cause a denial of service.
(CVE-2018-10196, CVE-2019-11023)

It was discovered that graphviz contains a buffer overflow
vulnerability. Exploitation via a specially crafted input file can cause
a denial of service or possibly allow for arbitrary code execution.
(CVE-2020-18032)