{"id":"CVE-2019-16707","aliases":["ALPINE-CVE-2019-16707","BELL-CVE-2019-16707","DEBIAN-CVE-2019-16707","EUVD-2019-7257","GHSA-q3gq-ffrv-w3c5","MGASA-2019-0421","OESA-2021-1023","RHSA-2020:3971","SUSE-SU-2020:2966-1","SUSE-SU-2020:2967-1","UBUNTU-CVE-2019-16707","openSUSE-SU-2020:1717-1","openSUSE-SU-2020:1719-1","openSUSE-SU-2024:10851-1"],"status":"published","title":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01649,"percentile":0.76674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2019-09-23T11:46:29Z","modified":"2026-11-03T06:31:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"hunspell","fixed_in":["1.7.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"hunspell","fixed_in":["1.6.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"hunspell","fixed_in":["1.6.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.8.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.8.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.8.3-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"hunspell","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"hunspell","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"hunspell","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"hunspell","fixed_in":["1.7.0-1.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"hunspell","fixed_in":["1.7.0-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"hunspell","fixed_in":["1.7.0-6.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell-debuginfo","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell-devel","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell-debuginfo","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell-devel","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell-debuginfo","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell-devel","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell-debuginfo","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell-devel","fixed_in":["0:1.3.2-16.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"hunspell","fixed_in":["1.6.2-3.3.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"hunspell","fixed_in":["1.6.2-3.3.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"hunspell","fixed_in":["1.3.2-19.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"hunspell","fixed_in":["1.3.2-19.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"hunspell","fixed_in":["1.3.2-19.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"hunspell","fixed_in":["1.6.2-lp151.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"hunspell","fixed_in":["1.6.2-lp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"hunspell","fixed_in":["1.7.0-2.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.3-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-1.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-6.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"hunspell-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"hunspell-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"hunspell-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"hunspell-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-16.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-3.3.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-3.3.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-19.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-19.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-19.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.2-4ubuntu1","1.3.2-6ubuntu1","1.3.2-6ubuntu2","1.3.2-6ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.0-10.1build1","1.6.0-10.1build2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3-3ubuntu3","1.3.3-3ubuntu4","1.3.3-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.33.0+dfsg-1build1","2.38.0+dfsg-1","2.45.0+dfsg-1","2.45.0+dfsg-1build1","2.48.0+dfsg-1","2.48.0+dfsg-1build1","2.54.0+dfsg-1","2.55.0+dfsg-1","2.55.0+dfsg-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.4.1-1build1","1.5.5-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1-1","4.4.1-1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.0-11build2","1.6.0-11.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.0+dfsg-2","3.7.0+dfsg-2build1","3.12.0+dfsg-1","3.13.0+dfsg-1","3.14.0+dfsg-1","3.15.0.1+dfsg-1","3.16.0+dfsg-1","3.16.0+dfsg-1build1","3.17.0+dfsg-1","3.17.0+dfsg-2","3.18.0+dfsg-1build1","3.19.0+dfsg-1","3.20.0+dfsg-1","3.21.0+dfsg-1","3.21.0+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.6-1","1.6.7-1","1.6.8-1","1.6.8-2","1.6.9-1","1.6.10-1","1.6.11-1","1.6.12-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.0-2build1","1.7.0-2build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.46.0+dfsg-1","4.2.0+dfsg-2","4.3.0+dfsg-1","4.3.0+dfsg-2","4.4.0+dfsg-1","4.5.0+dfsg-1","4.5.0+dfsg-2","4.5.0+dfsg-3","4.6.0+dfsg-1","4.7.0+dfsg-1","4.99.3+dfsg-2","4.99.4+dfsg-1","4.99.4+dfsg-1build1","4.99.4+dfsg+really4.10.0+py3-2","4.99.4+dfsg+really4.11.2-1","4.99.4+dfsg+really4.11.2-1build1","4.99.4+dfsg+really4.12.0-1","4.99.4+dfsg+really4.12.0-1build1","4.99.4+dfsg+really4.12.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.0-11.1build1","1.6.0-11.3","1.6.0-11.3build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.3-1","1.7.4-1","1.7.4-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.25.0+dfsg-2","5.33.2+dfsg-1","5.34.0+dfsg-1","5.35.0+dfsg-1ubuntu2","5.37.0+dfsg-1","5.37.0+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.6-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.24.0+ds-1","6.29.0+ds-1","7.0.0+ds-1","7.1.0+ds-1","7.1.0+ds-2","7.2.0+ds-1","7.2.0+ds-1build1","7.3.0+ds-1","7.4.0+ds-1","7.5.1+ds-1","7.5.1+ds-2","7.5.1+ds-3","7.6.0+ds-1","7.6.0+ds-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.5-1","1.8.6-1","1.8.6-1build1","1.8.6-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.26.0+ds-4build1","8.3.0+ds-1","8.4.0+ds-1","8.5.0+ds-1","8.6.0+ds-1","8.7.0+ds-1","8.8.0+ds-2","8.8.0+ds-3","8.8.0+ds-3build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.11-1","1.8.12-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.2.1+ds+~0.10.5-2build1","9.9.0+ds+~0.10.6-1","9.11.0+ds+~0.10.6-1","9.11.0+ds+~0.10.6-2","9.13.0+ds+~0.10.6-1","9.14.0+ds+~0.10.6-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.16+dfsg-3","2.8.16+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0-1","1.9.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"calibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.8.0+ds-3build1","8.13.0+ds+~0.10.5-3","8.14.0+ds+~0.10.5-1","8.15.0+ds+~0.10.5-1","8.16.0+ds+~0.10.5-2","8.16.2+ds+~0.10.5-1","8.16.2+ds+~0.10.5-2","8.16.2+ds+~0.10.5-3","9.2.1+ds+~0.10.5-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"focuswriter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.12-1","1.8.13-1","1.9.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-lp151.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-lp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hunspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.6"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"hunspell_project","product":"hunspell"}],"references":[{"url":"https://github.com/butterflyhack/hunspell-crash","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD4AJ4M74VT3I6L37E4P5DNYZYBZIOVM/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNTSVWI4SWBQL6XMXNGEH7EAQ45WN63G/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2YOYFI36IWKABNGFTWXCH7TTGAFODH6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24NTBHK2QNYKSBMJI34WEU5MHS3H2FAI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16707","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2YOYFI36IWKABNGFTWXCH7TTGAFODH6/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNTSVWI4SWBQL6XMXNGEH7EAQ45WN63G/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UD4AJ4M74VT3I6L37E4P5DNYZYBZIOVM/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/24NTBHK2QNYKSBMJI34WEU5MHS3H2FAI/"},{"url":"https://github.com/advisories/GHSA-q3gq-ffrv-w3c5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-16707","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-16707","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-16707","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0421.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25963","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UD4AJ4M74VT3I6L37E4P5DNYZYBZIOVM/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1023","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3971","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771026","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3971.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16707","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16707","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202966-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1151867","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16707","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202967-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16707","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ARK36GN54T2JM6Y2JVEQHZVXGX2ZPQD/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYGT75YB6QHUENFFAWZO4II2FUX42ARQ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T11:46:29Z","modified":"2024-08-05T01:17:41.18Z","updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2019-7257","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T11:46:29Z","modified":"2024-08-05T01:17:41Z","updated_at":"2026-11-03T02:40:32.32735Z"}],"ghsa":[{"id":"GHSA-q3gq-ffrv-w3c5","title":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2022-05-24T16:56:40Z","modified":"2023-02-13T21:31:06Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:07.010181Z"}],"nvd":[{"id":"CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T12:15:10.33Z","modified":"2026-06-17T02:22:38.467Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:05:28.126831Z"}],"osv":[{"id":"ALPINE-CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T12:15:10.33Z","modified":"2026-11-03T06:31:52.980670275Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2019-16707","title":"CVE-2019-16707 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:35.765171Z","modified":"2026-01-26T09:49:48.265676Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T12:15:10.33Z","modified":"2026-10-24T10:30:30.189040998Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T12:15:10.33Z","modified":"2026-09-21T07:01:35.593082366Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"OESA-2021-1023","title":"hunspell security update","description":"Hunspell is a free spell checker and morphological analyzer library and command-line tool, licensed under LGPL/GPL/MPL tri-license.\\r\\n\\r\\n\r\nSecurity Fix(es):\\r\\n\\r\\n\r\nHunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.(CVE-2019-16707)\\r\\n\\r\\n","status":"published","published":"2021-02-04T11:04:15Z","modified":"2026-08-18T01:15:07.513507704Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2020:3971","title":"Red Hat Security Advisory: hunspell security update","status":"published","published":"2024-09-16T04:00:06Z","modified":"2026-06-27T10:11:21Z","cvss":[{"version":"3.0","score":5.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-16707","description":"Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.","status":"published","published":"2019-09-23T12:15:00Z","modified":"2026-10-17T12:55:42.369151049Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"MGASA-2019-0421","title":"Updated hunspell packages fix security vulnerability","description":"Updated hunspell packages fix security vulnerability:\n\nHunspell 1.7.0 has an invalid read operation in\nSuggestMgr::leftcommonsubstring in suggestmgr.cxx (CVE-2019-16707).\n","status":"published","published":"2019-12-31T16:51:17Z","modified":"2026-04-16T04:42:48.93646749Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:1717-1","title":"Security update for hunspell","description":"This update for hunspell fixes the following issues:\n\n- CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-10-23T18:21:56Z","modified":"2026-02-04T04:29:37.525328Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1719-1","title":"Security update for hunspell","description":"This update for hunspell fixes the following issues:\n\n- CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-10-24T08:21:43Z","modified":"2026-02-04T02:27:15.250328Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10851-1","title":"hunspell-1.7.0-2.6 on GA media","description":"These are all security issues fixed in the hunspell-1.7.0-2.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:26:31.937708Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:2966-1","title":"Security update for hunspell","description":"This update for hunspell fixes the following issues:\n\n- CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).\n","status":"published","published":"2020-10-20T14:04:07Z","modified":"2026-02-04T02:30:54.737141Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2967-1","title":"Security update for hunspell","description":"This update for hunspell fixes the following issues:\n\n- CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).\n","status":"published","published":"2020-10-20T14:04:36Z","modified":"2026-02-04T02:42:38.826971Z","updated_at":"2026-11-02T15:53:48.11786Z"}]}}