CVE-2019-16093

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

9.8 CriticalFix available

CVE-2019-16093 is a critical vulnerability (CVSS 9.8) in Symonics Libmysofa, published September 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in libmysofa 0.8~dfsg0-1.

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.53%Up 0.9 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: CVE-2019-16093
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: CVE-2019-16093
Updated: 2026-11-02

EUVDEUVD-2019-6939 No score

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: EUVD-2019-6939
Updated: 2026-11-03

GitHub AdvisoriesGHSA-84qr-vpxc-hcpg 9.8

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: GHSA-84qr-vpxc-hcpg
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSV 9.8

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: CVE-2019-16093
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-16093 9.8

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: DEBIAN-CVE-2019-16093
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVUBUNTU-CVE-2019-16093 9.8

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

Record: UBUNTU-CVE-2019-16093
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0444-1 No score

Security update for libmysofa

This update for libmysofa fixes the following issues:

Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883

Update to version 0.9.1

Extended angular neighbor search to 'close the sphere'
Added and exposed mysofa_getfilter_float_nointerp method
Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040

Record: openSUSE-SU-2021:0444-1
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0459-1 No score

Security update for libmysofa

This update for libmysofa fixes the following issues:

Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883

Update to version 0.9.1

Extended angular neighbor search to 'close the sphere'
Added and exposed mysofa_getfilter_float_nointerp method
Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record: openSUSE-SU-2021:0459-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10960-1 No score

libmysofa-devel-1.2-1.3 on GA media

These are all security issues fixed in the libmysofa-devel-1.2-1.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10960-1
Updated: 2026-11-02

OSVUSN-4473-1 No score

libmysofa vulnerabilities

It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095)

Record: USN-4473-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libmysofa` Debian:12	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Debian:13	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Debian:14	before 0.8~dfsg0-1	0.8~dfsg0-1
`libmysofa` Ubuntu:18.04:LTS	before 0.6~dfsg0-3+deb10u1build1, plus listed versions 0.6~dfsg0-10.6~dfsg0-20.6~dfsg0-2ubuntu0.18.04.1	0.6~dfsg0-3+deb10u1build1
`libmysofa` openSUSE:Leap 15.2	before 0.9.1-lp152.3.3.1	0.9.1-lp152.3.3.1
`libmysofa` SUSE:Package Hub 15 SP2	before 0.9.1-bp152.4.3.1	0.9.1-bp152.4.3.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 36 moreShow less