DEBIAN-CVE-2019-6247

An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. A heap-based buffer overflow bug in svgppaggrender may lead to code execution. In the renderscanlinesaasolid function, the blendhline function is called repeatedly multiple times. blendhline is equivalent to ...

PT-2019-18051 · Boost +3 · Boost +3

Name of the Vulnerable Software and Affected Versions: svgpp version 1.2.3 Description: An issue was discovered in the Generic Image Library in Boost, where after calling the gil::get color function, the return code is used as an address. This leads to an Access Violation due to an out-of-bounds...

PT-2019-18052 · Agg +2 · Anti-Grain Geometry +2

Name of the Vulnerable Software and Affected Versions: Anti-Grain Geometry AGG version 2.4 svgpp aka svgpp version 1.2.3 Description: A heap-based buffer overflow bug in svgpp agg render may lead to code execution. The issue arises in the render scanlines aa solid function, where the blend hline...

PT-2019-18050 · Anti Grain Geometry +2 · Anti-Grain Geometry +2

Name of the Vulnerable Software and Affected Versions: svgpp version 1.2.3 Anti-Grain Geometry AGG version 2.4 Description: A problem exists in the agg::cell aa::not equal function where dx is assigned the value of x2 - x1. If dx is greater than or equal to dx limit, which is calculated as 16384...

CVE-2019-6245

CVE-2019-6245 affects svgpp (SVG++), via Anti-Grain Geometry (AGG) 2.4 integration. The issue is in agg::cell_aa::not_equal where dx is computed as (x2 - x1); if dx >= dx_limit (16384 <

CVE-2019-6246

The CVE-2019-6246 entry concerns SVG++ (svgpp) 1.2.3. A bug occurs after calling gil::get_color in Boost.GIL, where the return code is used as an address, causing an out-of-bounds read and an access violation. The connected sources corroborate the same vulnerability description across multiple fe...

CVE-2019-6247

CVE-2019-6247 affects Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (svgpp) 1.2.3. The vulnerability is a heap-based buffer overflow in svgpp_agg_render; in render_scanlines_aa_solid, blend_hline is invoked repeatedly, and each call writes heap data, with multiple calls overwriting heap data, po...