CVE-2019-15757
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
- Record
CVE-2019-15757- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
- Record
CVE-2019-15757- Updated
- 2026-11-02
EUVDEUVD-2019-6688 No score
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
- Record
EUVD-2019-6688- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x39p-4hj3-p7vg
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
- Record
GHSA-x39p-4hj3-p7vg- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVMGASA-2019-0404 No score
Updated libmirage packages fix security vulnerabilities
Updated libmirage packages fix security vulnerabilities:
The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer overflow that could lead to root access by a local user (CVE-2019-15540).
NULL pointer dereference in the NRG parser (CVE-2019-15757).
- Record
MGASA-2019-0404- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2095-1 No score
Security update for libmirage
This update for libmirage fixes the following issues:
Security issues fixed:
- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).
- Record
openSUSE-SU-2019:2095-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2096-1 No score
Security update for libmirage
This update for libmirage fixes the following issues:
Security issues fixed:
- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).
- Record
openSUSE-SU-2019:2096-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2129-1 No score
Security update for libmirage
This update for libmirage fixes the following issues:
Security issues fixed:
- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:2129-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10957-1 No score
libmirage-3_2-3.2.5-1.3 on GA media
These are all security issues fixed in the libmirage-3_2-3.2.5-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10957-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmirageMageia:7 From an advisory covering 2 CVEs |
before 3.2.3-1.mga7 | 3.2.3-1.mga7 |
libmirageopenSUSE:Leap 15.0 |
before 3.2.2-lp150.2.6.1 | 3.2.2-lp150.2.6.1 |
libmirageopenSUSE:Leap 15.1 |
before 3.2.2-lp151.3.6.1 | 3.2.2-lp151.3.6.1 |
libmirageSUSE:Package Hub 15 |
before 3.2.2-bp151.4.6.1 | 3.2.2-bp151.4.6.1 |
libmirageSUSE:Package Hub 15 SP1 |
before 3.2.2-bp151.4.6.1 | 3.2.2-bp151.4.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-15757 is a medium vulnerability (CVSS 6.5) in Libmirage Project Libmirage, published August 29, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. Fixed in libmirage 3.2.2-lp150.2.6.1.
References
gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932
sourceforge.net/p/cdemu/bugs/118
lists.opensuse.org/opensuse-security-announce/2019-09/msg00026.html
nvd.nist.gov/vuln/detail/CVE-2019-15757
Show 9 moreShow less
github.com/advisories/GHSA-x39p-4hj3-p7vg
advisories.mageia.org/MGASA-2019-0404.html
bugs.mageia.org/show_bug.cgi?id=25762
bugzilla.suse.com/1148728
suse.com/security/cve/CVE-2019-15757