Skip to content
OpenAdvisories
High USN-5988-1 2 CVEs

xcftools vulnerabilities

Published Mar 29, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that integer overflows vulnerabilities existed in Xcftools.
An attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2019-5086, CVE-2019-5087)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS xcftools 1.0.7-6ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS xcftools 1.0.7-6ubuntu0.20.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS xcftools 1.0.7-5ubuntu0.1~esm1

Vulnerabilities 2

  • High 8.8
    CVE-2019-5087

    An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bi…

    xcftools Ubuntu
  • High 7.5
    CVE-2019-5086

    An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm bi…

    xcftools Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-5086
  • report
    https://ubuntu.com/security/CVE-2019-5087