CVE-2019-6007

The CVE-2019-6007 issue affects apng-drawable versions 1.0.0 through 1.6.0. The root cause is an integer overflow in the decoding/processing path for APNG images, which can lead to denial of service or arbitrary code execution via unspecified vectors. Several connected sources (e.g., JVN, NVD, RH...

apng-drawable vulnerable to integer overflow

Overview apng-drawable provided by LINE Corporation contains an integer overflow vulnerability CWE-190. LINE Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and LINE Corporation coordinated under the Information Security Early Warning...

apng-drawable integer overflow vulnerability

apng-drawable is a lightweight fast animated Portable Network Graphics APNG image decoder for the Android platform. An integer overflow vulnerability in apng-drawable versions 1.0.0 through 1.6.0 can be exploited by an attacker to cause a denial of service and execute arbitrary code...

JVN#39383894: apng-drawable vulnerable to integer overflow

apng-drawable provided by LINE Corporation contains an integer overflow vulnerability CWE-190. Impact An attacker may cause a denial of service DoS condition or execute arbitrary code. Solution Update the Software The developer released apng-drawable that contains a fix for this vulnerability...