CVE-2019-20016

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.

• CWE-787

• https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6fPatch, Third Party Advisory
• https://github.com/hoene/libmysofa/issues/83Exploit, Third Party Advisory
• https://github.com/hoene/libmysofa/issues/84Exploit, Third Party Advisory
• https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6fPatch, Third Party Advisory
• https://github.com/hoene/libmysofa/issues/83Exploit, Third Party Advisory
• https://github.com/hoene/libmysofa/issues/84Exploit, Third Party Advisory

Published

Dec 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20010An issue was discovered in GNU LibreDWG 0.92. There is a use…8.8
• CVE-2019-20011An issue was discovered in GNU LibreDWG 0.92. There is a hea…8.8
• CVE-2019-20012An issue was discovered in GNU LibreDWG 0.92. Crafted input …6.5
• CVE-2019-20013An issue was discovered in GNU LibreDWG before 0.93. Crafted…6.5
• CVE-2019-20014An issue was discovered in GNU LibreDWG before 0.93. There i…8.8
• CVE-2019-20015An issue was discovered in GNU LibreDWG 0.92. Crafted input …6.5
• CVE-2019-20017A stack-based buffer over-read was discovered in Mat_VarRead…6.5
• CVE-2019-20018A stack-based buffer over-read was discovered in ReadNextCel…6.5
• CVE-2019-20019An attempted excessive memory allocation was discovered in M…6.5
• CVE-2019-20020A stack-based buffer over-read was discovered in ReadNextStr…6.5
• CVE-2019-20021A heap-based buffer over-read was discovered in canUnpack in…5.5
• CVE-2019-20022An invalid memory address dereference was discovered in load…6.5