CVE-2019-8383

Name of the Vulnerable Software and Affected Versions AdvanceCOMP versions prior to 2.1

Description An issue was discovered that can cause an invalid memory address to occur in the adv png unfilter 8 function in lib/png.c. This can be triggered by sending a crafted file to a binary, allowing an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.

Recommendations For AdvanceCOMP versions prior to 2.1, consider updating to a version that fixes the issue in the adv png unfilter 8 function. As a temporary workaround, consider restricting the use of the lib/png.c module to minimize the risk of exploitation.