CVE-2019-20019

An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...

CVE-2019-20019

An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...

CVE-2019-20009

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeSPLINEprivate in dwg.spec...

CVE-2019-20009

CVE-2019-20009 affects GNU LibreDWG prior to 0.93. The issue arises from crafted input causing an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec, leading to memory exhaustion. Multiple connected advisories (openSUSE/SUSE) document the vulnerability and confirm reme...

CVE-2019-20012

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeHATCHprivate in dwg.spec...

CVE-2019-20012

CVE-2019-20012 affects GNU LibreDWG up to version 0.92. Crafted input can cause an excessive memory allocation in dwg_decode_HATCH_private (dwg.spec). The Red Hat/OpenSUSE ecosystem references confirm the vulnerability and record fixes in LibreDWG, notably updating to release 0.9.x (e.g., 0.9.3) ...

CVE-2019-20013

CVE-2019-20013 affects GNU LibreDWG prior to 0.93: crafted input can trigger an excessive memory allocation in decode_3dsolid (dwg.spec). Connected advisories show this as addressed in the libredwg updates to release 0.9.3, with overflow/memory-leak mitigations and additional fuzzing protections....

CVE-2019-20013

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

CVE-2019-20015

CVE-2019-20015 affects GNU LibreDWG 0.92. Crafted input can trigger an excessive memory allocation in dwg_decode_LWPOLYLINE_private (dwg.spec). Public U/A details are provided across multiple advisories; exploitability status is not stated in the provided documents. OpenSUSE/SUSE advisories show ...

GNU LibreDWG Excessive Memory Allocation Vulnerability (CNVD-2020-03561)

LibreDWG is a free C library for reading and writing DWG files. An excessive memory allocation vulnerability exists in dwgdecodeHATCHprivate in dwg.spec in GNU LibreDWG 0.92. An attacker can exploit this vulnerability via specially crafted input to cause an attempt to allocate too much memory,...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

Integer overflow

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958

In CVE-2019-19958, the affected component is libIEC61850 1.4.0, specifically StringUtils_createStringFromBuffer in common/string_utilities.c. A signedness issue in integer handling could allow an under/over-approximation during buffer processing, potentially triggering an excessive memory allocat...

CVE-2019-19930

In libIEC61850 1.4.0, MmsValuenewOctetString in mms/isomms/common/mmsvalue.c has an integer signedness error that can lead to an attempted excessive memory allocation...

CVE-2019-19930

In libIEC61850 1.4.0, MmsValuenewOctetString in mms/isomms/common/mmsvalue.c has an integer signedness error that can lead to an attempted excessive memory allocation...

Integer overflow

In libIEC61850 1.4.0, MmsValuenewOctetString in mms/isomms/common/mmsvalue.c has an integer signedness error that can lead to an attempted excessive memory allocation...

CVE-2019-19930

libIEC61850 1.4.0 contains an integer signedness error in MmsValue_newOctetString (mms/iso_mms/common/mms_value.c) that can trigger an excessive memory allocation. Publicly reported across multiple sources (NVD, Red Hat, OSV, CNVD, CVE listing) with the same description, the flaw may result in a ...