CVE-2019-10672: Input Validation
Last updated 25 August 2025
Other sources
treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libmysofato a version that resolves this vulnerability.Fixed in 1.2~dfsg0-1Fixed in 1.3.1~dfsg0-1Fixed in 1.3.3+dfsg-1 - Upgrade
Upgrade
libmysofato a version that resolves this vulnerability.Fixed in 0.7
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10672?
The severity of CVE-2019-10672 is critical with a severity value of 9.8.
What is the description of CVE-2019-10672?
CVE-2019-10672 is a vulnerability in libmysofa before 0.7 that allows for improper validation of multiplications and additions.
What software is affected by CVE-2019-10672?
The affected software by CVE-2019-10672 is Symonics libmysofa version up to 0.7.
How can I fix CVE-2019-10672?
To fix CVE-2019-10672, it is recommended to update to the latest version of Symonics libmysofa (0.7 or higher).
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-10672?
The Common Weakness Enumeration (CWE) ID for CVE-2019-10672 is CWE-20.