Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5099 EUVD-2019-14704GHSA-6c7x-q2rf-g6cc

An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file …

Published Nov 6, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially craft a CMP image to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— LEADTOOLS LEADTOOLS 20.0.2019.3.15 —

References