CVE-2019-9656
HIGH 8.8EPSS 2.1%
An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 2.14% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2019-03-11
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- TeamSeri0us/pocs/tree/master/libofx42★ · 2019-10-31
Security advisories
- libofx/libofx/issues/22
- https://lists.debian.org/debian-lts-announce/2019/11/msg00021.html
- https://usn.ubuntu.com/4523-1