CVE-2019-6247
published 2019-01-13CVE-2019-6247: An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to…
PriorityP344high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
2.50%
83.1th percentile
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| antigrain | agg | — | — |
| debian | svgpp | — | — |
| svgpp | svgpp | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xmr8-c87m-jhw3: An issue was discovered in Anti-Grain Geometry (AGG) 2
ghsa_unreviewed·2022-05-13
CVE-2019-6247 [HIGH] CWE-787 GHSA-xmr8-c87m-jhw3: An issue was discovered in Anti-Grain Geometry (AGG) 2
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.
OSV
CVE-2019-6247: An issue was discovered in Anti-Grain Geometry (AGG) 2
osv·2019-01-13·CVSS 8.8
CVE-2019-6247 [HIGH] CVE-2019-6247: An issue was discovered in Anti-Grain Geometry (AGG) 2
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.
Debian
CVE-2019-6247: svgpp - An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka s...
vendor_debian·2019·CVSS 8.8
CVE-2019-6247 [HIGH] CVE-2019-6247: svgpp - An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka s...
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-01-13
Published