CVE-2019-5086

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.0.7. An integer overflow can occur while walking through tiles that could be exploited to corrupt memory and execute arbitrary code. In order to trigger this vulnerability, a victim would need to open a specially crafted XCF file.

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.0.7. An integer overflow can occur while walking through tiles that could be exploited to corrupt memory and execute arbitrary code. In order to trigger this vulnerability, a victim would need to open a specially crafted XCF file.

Se presenta una vulnerabilidad de desbordamiento de enteros explotable en la función flattenIncrementally en los binarios xcf2png y xcf2pnm de xcftools, versión 1.0.7. Puede presentarse un desbordamiento de enteros al caminar a través de mosaicos que podrían ser explotados para corromper la memoria y ejecutar código arbitrario. Con el fin de desencadenar esta vulnerabilidad, una víctima necesitaría abrir un archivo XCF especialmente diseñado.