Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5061 State: PUBLISHED Published: 2019-12-12T21:36:45 Last Updated: 2024-08-04T19:47:55.757Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: W1.f1 Problem Types: CWE-440 Description: An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge A
ping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0849
CVE ID: CVE-2019-5062 State: PUBLISHED Published: 2019-12-12T21:36:54 Last Updated: 2024-08-04T19:47:55.621Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: W1.f1 Problem Types: CWE-440 Description: An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850
CVE ID: CVE-2019-5063 State: PUBLISHED Published: 2020-01-03T16:57:31 Last Updated: 2024-08-04T19:47:56.691Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: OpenCV Problem Types: CWE-120 Description: An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuApr2021.html - htt
ional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuApr2021.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0852 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2019-5064 State: PUBLISHED Published: 2020-01-03T16:57:39 Last Updated: 2024-08-04T19:47:55.691Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: OpenCV Problem Types: CWE-120 Description: An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cp
ulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuApr2021.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0853 - https://github.com/opencv/opencv/issues/15857 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2019-5065 State: PUBLISHED Published: 2019-09-05T16:07:42 Last Updated: 2024-08-04T19:47:56.665Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Blynck Inc Problem Types: CWE-125 Description: An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0854
CVE ID: CVE-2019-5066 State: PUBLISHED Published: 2019-09-18T20:16:09 Last Updated: 2024-08-04T19:47:56.635Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Talos Products: Aspose Problem Types: CWE-416 Description: An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulner
t application. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0855
CVE ID: CVE-2019-5067 State: PUBLISHED Published: 2019-09-18T20:17:47 Last Updated: 2024-08-04T19:47:56.629Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Talos Products: Aspose Problem Types: CWE-416 Description: An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write from uninitialized memory, resulting in memory corruption and possibly arbitrary code execution. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application. Additional Analyst Notes: - CVE Program Container: Refere
PDF document needs to be processed by the target application. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0856
CVE ID: CVE-2019-5068 State: PUBLISHED Published: 2019-11-05T21:11:55 Last Updated: 2024-08-04T19:47:56.664Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: Mesa 3D X11 Graphics library Problem Types: CWE-277 Description: An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg0003
ian.org/debian-lts-announce/2019/11/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html - https://usn.ubuntu.com/4271-1/ - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857 - https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html - https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc
CVE ID: CVE-2019-5069 State: PUBLISHED Published: 2019-09-05T16:52:12 Last Updated: 2024-08-04T19:47:55.814Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Epignosis Problem Types: CWE-502 Description: A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0858
CVE ID: CVE-2019-5070 State: PUBLISHED Published: 2019-09-05T16:52:27 Last Updated: 2024-08-04T19:47:56.704Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: Epignosis Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-20
ional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0859
CVE ID: CVE-2019-5071 State: PUBLISHED Published: 2019-11-21T16:15:49 Last Updated: 2024-08-04T19:47:55.647Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Tenda AC9 Problem Types: CWE-78 Description: An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS1 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this vulnerability. Additional Analyst Notes: - CVE Progr
An attacker can send HTTP POST request with command to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0861
CVE ID: CVE-2019-5072 State: PUBLISHED Published: 2019-11-21T16:16:06 Last Updated: 2024-08-04T19:47:55.651Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Tenda AC9 Problem Types: CWE-78 Description: An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route (AC9V1.0 Firmware V15.03.05.16multiTRU). A specially crafted HTTP POST request can cause a command injection in the DNS2 post parameters, resulting in code execution. An attacker can send HTTP POST request with command to trigger this vulnerability. Additional Analyst Notes: - CVE Progr
CVE ID: CVE-2019-5073 State: PUBLISHED Published: 2019-12-18T20:51:48 Last Updated: 2024-08-04T19:47:55.738Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: information exposure Description: An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause an external tool to fail, resulting in uninitialized stack data to be copied to the response packet buffer. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Contain
attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0862
CVE ID: CVE-2019-5074 State: PUBLISHED Published: 2019-12-18T19:30:27 Last Updated: 2024-08-04T19:47:55.643Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: remote code execution Description: An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a stack buffer overflow, resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
ticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0863
CVE ID: CVE-2019-5075 State: PUBLISHED Published: 2019-12-18T20:51:51 Last Updated: 2024-08-04T19:47:56.306Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets sent to the iocheckd service "I/O-Check" can cause a stack buffer overflow in the sub-process getcouplerdetails, resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes:
in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0864
CVE ID: CVE-2019-5076 State: PUBLISHED Published: 2019-12-03T21:24:46 Last Updated: 2024-08-04T19:47:56.961Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-787 Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the viction to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TA
Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0865
CVE ID: CVE-2019-5077 State: PUBLISHED Published: 2019-12-18T19:53:16 Last Updated: 2024-08-04T19:47:55.854Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial of service, resulting in the device entering an error state where it ceases all network communications. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Conta
n attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0869
CVE ID: CVE-2019-5078 State: PUBLISHED Published: 2019-12-18T20:51:53 Last Updated: 2024-08-04T19:47:56.805Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial of service, resulting in the device entering an error state where it ceases all network communications. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Containe
ttacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0870
CVE ID: CVE-2019-5079 State: PUBLISHED Published: 2019-12-18T20:33:07 Last Updated: 2024-08-04T19:47:56.879Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: remote code execution Description: An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligenc
to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0871
CVE ID: CVE-2019-5080 State: PUBLISHED Published: 2019-12-18T20:35:41 Last Updated: 2024-08-04T19:47:56.073Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Refere
send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0872
CVE ID: CVE-2019-5081 State: PUBLISHED Published: 2019-12-18T19:59:36 Last Updated: 2024-08-04T19:47:56.625Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: remote code execution Description: An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintell
to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0874 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0873
CVE ID: CVE-2019-5082 State: PUBLISHED Published: 2020-01-08T16:19:20 Last Updated: 2024-08-04T19:47:56.663Z Vendors: n/a Products: WAGO PFC200, WAGO PFC100 Problem Types: heap buffer overflow Description: An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
authenticated packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0874
CVE ID: CVE-2019-5083 State: PUBLISHED Published: 2019-12-03T21:20:40 Last Updated: 2024-08-04T19:47:55.813Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-787 Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_re
ability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0875
CVE ID: CVE-2019-5084 State: PUBLISHED Published: 2019-11-06T19:33:28 Last Updated: 2024-08-04T19:47:55.812Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: LEADTOOLS Problem Types: CWE-787 Description: An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF image to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TAL
Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0876
CVE ID: CVE-2019-5085 State: PUBLISHED Published: 2019-12-11T23:46:43 Last Updated: 2024-08-04T19:47:55.981Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: LEADTOOLS libltdic.so Problem Types: CWE-190 Description: An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0877
CVE ID: CVE-2019-5086 State: PUBLISHED Published: 2019-11-21T15:44:23 Last Updated: 2024-08-04T19:47:56.793Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: xcftools Problem Types: CWE-680 Description: An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.0.7. An integer overflow can occur while walking through tiles that could be exploited to corrupt memory and execute arbitrary code. In order to trigger this vulnerability, a victim would need to open a specially crafted XCF file. Additional Analyst Notes: - CVE Program Container: References: - https:/
ould need to open a specially crafted XCF file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2021/02/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00008.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0878 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0878
CVE ID: CVE-2019-5087 State: PUBLISHED Published: 2019-11-21T15:44:57 Last Updated: 2024-08-04T19:47:55.746Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: xcftools Problem Types: CWE-680 Description: An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur while calculating the row's allocation size, that could be exploited to corrupt memory and eventually execute arbitrary code. In order to trigger this vulnerability, a victim would need to open a specially crafted XCF file. Additional Analyst Notes: - CVE Program Container: Re
ability, a victim would need to open a specially crafted XCF file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2021/02/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00008.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0879 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0879