CVE-2019-13989
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
CVE-2019-13989 is a high vulnerability (CVSS 7.8) in Dpic Project Dpic, published July 19, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in dpic 2018.02.01-2.1.mga7.
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
- Record
CVE-2019-13989- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
- Record
CVE-2019-13989- Updated
- 2026-11-02
EUVDEUVD-2019-5248 No score
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
- Record
EUVD-2019-5248- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g5g8-hp43-g9f4 No score
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
- Record
GHSA-g5g8-hp43-g9f4- Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-13989
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
- Record
UBUNTU-CVE-2019-13989- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0460 No score
Updated dpic package fixes a security vulnerability
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c. (CVE-2019-13989)
- Record
MGASA-2020-0460- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dpicMageia:7 |
before 2018.02.01-2.1.mga7 | 2018.02.01-2.1.mga7 |
dpicUbuntu:16.04:LTS |
All versions, plus listed versions 2014.01.01+dfsg1-0ubuntu1 |
None known |
dpicUbuntu:18.04:LTS |
All versions, plus listed versions 2014.01.01+dfsg1-0ubuntu12014.01.01+dfsg1-0ubuntu2 |
None known |
dpicUbuntu:20.04:LTS |
All versions, plus listed versions 2014.01.01+dfsg1-0ubuntu22019.08.30-42019.11.30-12020.03.01-1 |
None known |
dpicUbuntu:22.04:LTS |
All versions, plus listed versions 2021.01.01-12021.11.01-1 |
None known |
dpicUbuntu:24.04:LTS |
All versions, plus listed versions 2023.06.01-1 |
None known |
dpicUbuntu:25.10 |
All versions, plus listed versions 2023.06.01-1 |
None known |
dpicUbuntu:26.10 |
All versions, plus listed versions 2023.06.01-1build1 |
None known |
dpicUbuntu:26.04:LTS |
All versions, plus listed versions 2023.06.01-12023.06.01-1build1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
gitlab.com/aplevich/dpic/issues/4
nvd.nist.gov/vuln/detail/CVE-2019-13989
github.com/advisories/GHSA-g5g8-hp43-g9f4
advisories.mageia.org/MGASA-2020-0460.html
bugs.mageia.org/show_bug.cgi?id=27759
security-tracker.debian.org/tracker/CVE-2019-13989
ubuntu.com/security/CVE-2019-13989
cve.org/CVERecord?id=CVE-2019-13989