cve/2019/CVE-2019-9904.md

CVE-2019-9904

Description

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

POC

Reference

• https://gitlab.com/graphviz/graphviz/issues/1512
• https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/

Github

No PoCs found on GitHub currently.