Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9210
HistoryFeb 27, 2019 - 2:29 p.m.

Integer overflow

2019-02-2714:29:00
PRIOn knowledge base
www.prio-n.com
7

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)