Lucene search

K
redhatcveRedhat.comRH:CVE-2019-9210
HistoryMar 01, 2019 - 4:20 p.m.

CVE-2019-9210

2019-03-0116:20:02
redhat.com
access.redhat.com
10

0.001 Low

EPSS

Percentile

44.7%

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)