high7.8
CVE-2019-5099
An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20.
Impact
An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially craft a CMP image to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leadtools | Leadtools | Version 20.0.2019.3.15 |