CVE-2019-6247— SVG++ Anti-Grain Geometry 缓冲区错误漏洞

N/A

An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.

N/A

N/A

SVG++ Anti-Grain Geometry 缓冲区错误漏洞

SVG++（又名Ssvgpp）是一个C++框架。该框架中包括SVG语法解析器、处理解析数据的适配器以及多种实用程序。Anti-Grain Geometry（AGG）是使用在其中的一个2D渲染库。 SVG++ 1.2.3版本中使用的AGG 2.4版本的svgpp_agg_render存在基于堆的缓冲区溢出漏洞。攻击者可利用该漏洞执行代码（覆盖堆数据）。

N/A

N/A