CVE-2020-23909
HIGHAdvanceMAME < 2.1 - Heap-based Buffer Over-read in png_convert_4
Title source: llmDescription
Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory
https://sourceforge.net/p/advancemame/bugs/285/
Scores
CVSS v3
7.1
EPSS
0.0028
EPSS Percentile
19.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-125
Status
published
Products (1)
advancemame/advancemame
< 2.1
Published
Jul 18, 2023
Tracked Since
Feb 18, 2026