{"id":"CVE-2019-15757","aliases":["EUVD-2019-6688","GHSA-x39p-4hj3-p7vg","MGASA-2019-0404","openSUSE-SU-2019:2095-1","openSUSE-SU-2019:2096-1","openSUSE-SU-2019:2129-1","openSUSE-SU-2024:10957-1"],"status":"published","title":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","description":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01588,"percentile":0.75785,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-08-29T00:29:40Z","modified":"2026-06-17T02:21:01Z","fixes":[{"ecosystem":"openSUSE:Leap 15.0","package":"libmirage","fixed_in":["3.2.2-lp150.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libmirage","fixed_in":["3.2.2-lp151.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15","package":"libmirage","fixed_in":["3.2.2-bp151.4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"libmirage","fixed_in":["3.2.2-bp151.4.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:7","package":"libmirage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libmirage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-lp150.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libmirage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-lp151.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"libmirage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"libmirage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-bp151.4.6.1"}]}]}],"products":[{"vendor":"libmirage_project","product":"libmirage"}],"references":[{"url":"https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://sourceforge.net/p/cdemu/bugs/118/","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00037.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15757"},{"url":"https://sourceforge.net/p/cdemu/bugs/118"},{"url":"https://github.com/advisories/GHSA-x39p-4hj3-p7vg"},{"url":"https://advisories.mageia.org/MGASA-2019-0404.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25762","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DUCNLDN2OVWC3774CP22D57BZFGG4XUP/#DUCNLDN2OVWC3774CP22D57BZFGG4XUP","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1148728","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15757","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZB3ZYY4IJMU44OYKWFOBW7H6LAQT5OXN/#ZB3ZYY4IJMU44OYKWFOBW7H6LAQT5OXN","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IZZMSGF7NFL4CIF62UEKF4N3457FNS76/#IZZMSGF7NFL4CIF62UEKF4N3457FNS76","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15540","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-15757","description":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","status":"published","published":"2019-08-29T00:29:40Z","modified":"2024-08-05T00:56:22.212Z","updated_at":"2026-11-02T14:20:21.397307Z"}],"euvd":[{"id":"EUVD-2019-6688","description":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","status":"published","published":"2019-08-29T00:29:40Z","modified":"2024-08-05T00:56:22Z","updated_at":"2026-11-03T02:40:35.132035Z"}],"ghsa":[{"id":"GHSA-x39p-4hj3-p7vg","title":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","description":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","status":"published","published":"2022-05-24T16:55:07Z","modified":"2024-04-04T01:50:42Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:56:03.407648Z"}],"nvd":[{"id":"CVE-2019-15757","description":"libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.","status":"published","published":"2019-08-29T01:15:11.867Z","modified":"2026-06-17T02:21:01.223Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:25.691233Z"}],"osv":[{"id":"MGASA-2019-0404","title":"Updated libmirage packages fix security vulnerabilities","description":"Updated libmirage packages fix security vulnerabilities:\n\nThe CSO filter in libMirage in CDemu did not validate the part size,\ntriggering a heap-based buffer overflow that could lead to root access\nby a local user (CVE-2019-15540).\n\nNULL pointer dereference in the NRG parser (CVE-2019-15757).\n","status":"published","published":"2019-12-24T12:24:34Z","modified":"2026-04-16T04:40:58.720713748Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2095-1","title":"Security update for libmirage","description":"This update for libmirage fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).\n","status":"published","published":"2019-09-08T16:18:09Z","modified":"2026-02-04T03:22:42.619203Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2096-1","title":"Security update for libmirage","description":"This update for libmirage fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).\n","status":"published","published":"2019-09-08T16:18:21Z","modified":"2026-02-04T03:35:40.329605Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2129-1","title":"Security update for libmirage","description":"This update for libmirage fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728).\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2019-09-14T04:17:39Z","modified":"2026-02-04T02:41:24.046785Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10957-1","title":"libmirage-3_2-3.2.5-1.3 on GA media","description":"These are all security issues fixed in the libmirage-3_2-3.2.5-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:18:15.822398Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}