CVE-2019-9904

MEDIUM

graphviz 2.40.1 - Stack Overflow via Recursive agclose Calls

Title source: llm
STIX 2.1

Description

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

References (3)

Core 3
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://gitlab.com/graphviz/graphviz/issues/1512
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202107-04

Scores

CVSS v3 6.5
EPSS 0.0270
EPSS Percentile 83.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-674
Status published
Products (1)
graphviz/graphviz 2.40.1
Published Mar 21, 2019
Tracked Since Feb 18, 2026