8.8
CVSSv3

CVE-2019-6245

Published: 13/01/2019 Updated: 01/04/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

An issue exists in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_aa::not_equal, dx is assigned to (x2 - x1). If dx >= dx_limit, which is (16384 << poly_subpixel_shift), this function will call itself recursively. There can be a situation where (x2 - x1) is always bigger than dx_limit during the recursion, leading to continual stack consumption.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

svgpp svgpp 1.2.3

antigrain agg 2.4

debian debian linux 8.0

debian debian linux 9.0

Vendor Advisories

Debian Bug report logs - #919321 CVE-2019-6246 Package: src:svgpp; Maintainer for src:svgpp is Anton Gladky &lt;gladk@debianorg&gt;; Reported by: Moritz Muehlenhoff &lt;jmm@debianorg&gt; Date: Mon, 14 Jan 2019 22:27:01 UTC Severity: grave Tags: fixed-upstream, security Fixed in version svgpp/123+dfsg1-4 Done: Anton Gladky ...