CVE-2019-8379

Name of the Vulnerable Software and Affected Versions AdvanceCOMP versions prior to 2.1

Description An issue exists in the function be uint32 read() located in endianrw.h, which can cause a NULL pointer dereference. This can be triggered by sending a crafted file to a binary, allowing an attacker to cause a Denial of Service or possibly have other unspecified impact when a victim opens a specially crafted file.

Recommendations For AdvanceCOMP versions prior to 2.1, as a temporary workaround, consider restricting the use of the be uint32 read() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.