Vulnerabilities > CVE-2019-5084 - Out-of-bounds Write vulnerability in Leadtools 20.0.2019.3.15

Summary

An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF image to trigger this vulnerability.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-787 - Out-of-bounds Write

Talos

References