PoC Index85,100 CVEs with PoCs

CVE-2019-5087

HIGH 8.8EPSS 3.6%

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur while calculating the row's allocation size, that could be exploited to corrupt memory and eventually execute arbitrary code. In order to trigger this vulnerability, a victim would need to open a specially crafted XCF file.

Affected
xcftools
CVSS v3.1 NVD
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.0 CISCO
8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 NVD
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
3.64% chance of exploitation in the next 30 days, 89th percentile
Published
2019-11-21
Updated
2024-08-04

Proof-of-concept exploits (1)

Security advisories

References