CVE-2019-20016

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in…

published December 27, 2019

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01953 · 80.1th percentile
Published
2019-12-27T01:12Z
EPSS history
Timeline
  • 27 DEC 01:12Z
    libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in…
    cvelistv5