CVE-2019-6007

HIGH

apng-drawable 1.0.0-1.6.0 - Integer Overflow or Wraparound

Title source: llm
STIX 2.1

Description

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://jvn.jp/en/jp/JVN39383894/index.html
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN97845465/index.html

Scores

CVSS v3 8.8
EPSS 0.0203
EPSS Percentile 78.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (1)
linecorp/apng-drawable 1.0.0 - 1.6.0
Published Sep 12, 2019
Tracked Since Feb 18, 2026