CVE-2019-12835

The CVE-2019-12835 entry concerns Leanify 0.4.3, specifically the formats/xml.cpp implementation. The vulnerability is a controlled out-of-bounds write in xml_memory_writer::write triggered by certain characters that require escaping. This is the concrete detail provided across connected document...

CVE-2019-12298

The CVE-2019-12298 entry concerns Leanify 0.4.3, where a vulnerability allows remote attackers to trigger an out-of-bounds write of 1024 bytes by supplying a modified input file. The issue is caused by input handling that can write beyond allocated memory, potentially impacting availability and i...