Every CVESearch/Get API key

CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

7.8 HighFix available

CVE-2019-13989 is a high vulnerability (CVSS 7.8) in Dpic Project Dpic, published July 19, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in dpic 2018.02.01-2.1.mga7.

What does this mean?
Severity
7.8 HighCVSS 3.1, NVD
Exploit chance
0.98%EPSS, 62nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2018.02.01-2.1.mga7dpic +8 more

Description

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.98%Up 0.6 points since Apr 14, 2021
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dpic
Mageia:7
before 2018.02.01-2.1.mga7
2018.02.01-2.1.mga7
dpic
Ubuntu:16.04:LTS
All versions, plus listed versions
2014.01.01+dfsg1-0ubuntu1
None known
dpic
Ubuntu:18.04:LTS
All versions, plus listed versions
2014.01.01+dfsg1-0ubuntu12014.01.01+dfsg1-0ubuntu2
None known
dpic
Ubuntu:20.04:LTS
All versions, plus listed versions
2014.01.01+dfsg1-0ubuntu22019.08.30-42019.11.30-12020.03.01-1
None known
dpic
Ubuntu:22.04:LTS
All versions, plus listed versions
2021.01.01-12021.11.01-1
None known
dpic
Ubuntu:24.04:LTS
All versions, plus listed versions
2023.06.01-1
None known
dpic
Ubuntu:25.10
All versions, plus listed versions
2023.06.01-1
None known
dpic
Ubuntu:26.10
All versions, plus listed versions
2023.06.01-1build1
None known
dpic
Ubuntu:26.04:LTS
All versions, plus listed versions
2023.06.01-12023.06.01-1build1
None known

What each source reports

NVD Score used7.8

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Record
CVE-2019-13989
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE ListNo score

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Record
CVE-2019-13989
Updated
2026-11-02
EUVDEUVD-2019-5248No score

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Record
EUVD-2019-5248
Updated
2026-11-03
GitHub AdvisoriesGHSA-g5g8-hp43-g9f4No score

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Record
GHSA-g5g8-hp43-g9f4
Updated
2026-11-02
OSVUBUNTU-CVE-2019-139897.8

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.

Record
UBUNTU-CVE-2019-13989
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0460No score

Updated dpic package fixes a security vulnerability

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c. (CVE-2019-13989)

Record
MGASA-2020-0460
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open