29 matches found
DEBIAN-CVE-2019-6247
An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. A heap-based buffer overflow bug in svgppaggrender may lead to code execution. In the renderscanlinesaasolid function, the blendhline function is called repeatedly multiple times. blendhline is equivalent to ...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow. An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. In the function agg::cellaa::notequal, dx is assigned to x2 - x1. If dx = dxlimit, which is 16384 polysubpixelshift, this function...
PT-2019-18050 · Anti Grain Geometry +2 · Anti-Grain Geometry +2
Name of the Vulnerable Software and Affected Versions: svgpp version 1.2.3 Anti-Grain Geometry AGG version 2.4 Description: A problem exists in the agg::cell aa::not equal function where dx is assigned the value of x2 - x1. If dx is greater than or equal to dx limit, which is calculated as 16384...
PT-2019-18051 · Boost +3 · Boost +3
Name of the Vulnerable Software and Affected Versions: svgpp version 1.2.3 Description: An issue was discovered in the Generic Image Library in Boost, where after calling the gil::get color function, the return code is used as an address. This leads to an Access Violation due to an out-of-bounds...
PT-2019-18052 · Agg +2 · Anti-Grain Geometry +2
Name of the Vulnerable Software and Affected Versions: Anti-Grain Geometry AGG version 2.4 svgpp aka svgpp version 1.2.3 Description: A heap-based buffer overflow bug in svgpp agg render may lead to code execution. The issue arises in the render scanlines aa solid function, where the blend hline...
CVE-2019-6246: Out-of-bounds Read
An issue was discovered in SVG++ aka svgpp 1.2.3. After calling the gil::getcolor function in Generic Image Library in Boost, the return code is used as an address, leading to an Access Violation because of an out-of-bounds read...
CVE-2019-6247
CVE-2019-6247 affects Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (svgpp) 1.2.3. The vulnerability is a heap-based buffer overflow in svgpp_agg_render; in render_scanlines_aa_solid, blend_hline is invoked repeatedly, and each call writes heap data, with multiple calls overwriting heap data, po...
CVE-2019-6246
The CVE-2019-6246 entry concerns SVG++ (svgpp) 1.2.3. A bug occurs after calling gil::get_color in Boost.GIL, where the return code is used as an address, causing an out-of-bounds read and an access violation. The connected sources corroborate the same vulnerability description across multiple fe...
CVE-2019-6245
CVE-2019-6245 affects svgpp (SVG++), via Anti-Grain Geometry (AGG) 2.4 integration. The issue is in agg::cell_aa::not_equal where dx is computed as (x2 - x1); if dx >= dx_limit (16384 <