CVE-2019-9210

Published: 27 February 2019

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

Priority

Medium

CVSS 3 base score: 7.8

Status

Package Release Status
advancecomp
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 18.04 LTS (Bionic Beaver)
Released (2.1-1ubuntu0.18.04.1)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (1.20-1ubuntu0.2)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [1.18-1ubuntu0.2])
Patches:
Upstream: https://github.com/amadvance/advancecomp/commit/fcf71a89265c78fc26243574dda3a872574a5c02