CVE-2019-9210

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

Link	Resource
https://sourceforge.net/p/advancemame/bugs/277/	Exploit Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00004.html	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R56LVWC7KUNXFRKQB3Y5NX2YHFJKYZB4/	Mailing List Third Party Advisory
https://usn.ubuntu.com/3936-1/	Third Party Advisory
https://usn.ubuntu.com/3936-2/	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00034.html	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:advancemame:advancecomp:2.1:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

---

Published : 2019-02-27 02:29

Updated : 2022-04-06 06:27

---

NVD link : CVE-2019-9210

Mitre link : CVE-2019-9210

No products.

CWE-125

Out-of-bounds Read

CWE-190