{"id":"CVE-2019-3572","aliases":["EUVD-2019-13208","GHSA-xpp7-pwg9-79jx","UBUNTU-CVE-2019-3572"],"status":"published","title":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function...","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01385,"percentile":0.72401,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-787"],"published":"2019-01-02T15:00:00Z","modified":"2026-10-20T10:51:39Z","affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.5-1.2ubuntu2","1:0.4.5-1.2ubuntu5","1:0.4.5-1.2ubuntu6","1:0.4.5-1.2ubuntu7"]}],"products":[{"vendor":"libming","product":"libming"}],"references":[{"url":"https://github.com/libming/libming/issues/169","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3572"},{"url":"https://github.com/advisories/GHSA-xpp7-pwg9-79jx"},{"url":"https://ubuntu.com/security/CVE-2019-3572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3572","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-3572","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2019-01-02T15:00:00Z","modified":"2024-09-16T16:58:50.796Z","updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13208","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2019-01-02T15:00:00Z","modified":"2024-09-16T16:58:50Z","updated_at":"2026-11-03T00:55:46.200652Z"}],"ghsa":[{"id":"GHSA-xpp7-pwg9-79jx","title":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function...","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2022-05-13T01:08:14Z","modified":"2023-02-01T05:03:16Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:02.739665Z"}],"nvd":[{"id":"CVE-2019-3572","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2019-01-02T15:29:00.33Z","modified":"2026-06-17T02:35:15.23Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:05:02.989216Z"}],"osv":[{"id":"CVE-2019-3572","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2019-01-02T15:29:00.33Z","modified":"2026-10-20T10:51:39.479798129Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"UBUNTU-CVE-2019-3572","description":"An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.","status":"published","published":"2019-01-02T15:29:00Z","modified":"2026-04-22T11:57:22.74202Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"}]}}