CVE-2019-5100

An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can cause an integer overflow, potentially resulting in code execution. An attacker can specially craft a BMP image to trigger this vulnerability.

• CWE-190
• CWE-190

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0892Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0892Exploit, Third Party Advisory

Published

Nov 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5094An exploitable code execution vulnerability exists in the qu…7.5
• CVE-2019-5095An issue summary information disclosure vulnerability exists…4.3
• CVE-2019-5096An exploitable code execution vulnerability exists in the pr…9.8
• CVE-2019-5097A denial-of-service vulnerability exists in the processing o…7.5
• CVE-2019-5098An exploitable out-of-bounds read vulnerability exists in AM…8.6
• CVE-2019-5099An exploitable integer underflow vulnerability exists in the…7.8
• CVE-2019-5101An exploitable information leak vulnerability exists in the …5.9
• CVE-2019-5102An exploitable information leak vulnerability exists in the …5.9
• CVE-2019-5104Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-5105An exploitable memory corruption vulnerability exists in the…7.5
• CVE-2019-5106A hard-coded encryption key vulnerability exists in the auth…5.5
• CVE-2019-5107A cleartext transmission vulnerability exists in the network…7.5