Stack Consumption Vulnerability in Graphviz 2.40.1

Stack Consumption Vulnerability in Graphviz 2.40.1

CVE-2019-9904 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

Learn more about our Web Application Penetration Testing UK.