stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
References
Link | Resource |
---|---|
https://github.com/saitoha/libsixel/issues/109 | Exploit Third Party Advisory |
https://github.com/saitoha/libsixel/issues/109 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:35
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/saitoha/libsixel/issues/109 - Exploit, Third Party Advisory |
Information
Published : 2019-12-13 02:15
Updated : 2024-11-21 04:35
NVD link : CVE-2019-19777
Mitre link : CVE-2019-19777
CVE.ORG link : CVE-2019-19777
JSON object : View
Products Affected
nothings
- stb_image.h
libsixel_project
- libsixel
CWE
CWE-125
Out-of-bounds Read