CVE-2019-16347: Buffer Overflow
Published Sep 16, 2019
·Updated
ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
Affected Software
2 affected components
Miniupnp Project Ngiflib=0.4
Ngiflib Project Ngiflib=0.4
Remediation
Event History
Sep 16, 2019
CVE Published
via MITRE·12:57 PM
Data Sourced
via MITRE·12:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16347?
CVE-2019-16347 is classified as a high severity vulnerability due to its potential to cause a heap-based buffer overflow.
2
How do I fix CVE-2019-16347?
To fix CVE-2019-16347, upgrade ngiflib to a version that has addressed the buffer overflow issue.
3
What type of vulnerability is CVE-2019-16347?
CVE-2019-16347 is a heap-based buffer overflow vulnerability.
4
Which versions of ngiflib are affected by CVE-2019-16347?
CVE-2019-16347 affects ngiflib version 0.4.
5
What function is mishandled in CVE-2019-16347?
The vulnerability in CVE-2019-16347 is related to the WritePixels() function in ngiflib's ngiflib.c.