CVE-2019-6245

An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_aa::not_equal, dx is assigned to (x2 - x1). If dx >= dx_limit, which is (16384 << poly_subpixel_shift), this function will call itself recursively. There can be a situation where (x2 - x1) is always bigger than dx_limit during the recursion, leading to continual stack consumption.

• CWE-787

• https://github.com/svgpp/svgpp/issues/70Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00001.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00038.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html
• https://github.com/svgpp/svgpp/issues/70Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00001.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00038.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html

Published

Jan 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6239This issue was addressed with improved handling of file meta…7.8
• CVE-2019-6240An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-6241In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet c…
• CVE-2019-6242Kentico v10.0.42 allows Global Administrators to read the cl…
• CVE-2019-6243Frog CMS 0.9.5 allows XSS via the forgot password page (aka …
• CVE-2019-6244An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlb…
• CVE-2019-6246An issue was discovered in SVG++ (aka svgpp) 1.2.3. After ca…
• CVE-2019-6247An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as …
• CVE-2019-6248PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Sc…
• CVE-2019-6249An issue was discovered in HuCart v5.7.4. There is a CSRF vu…
• CVE-2019-6250A pointer overflow, with code execution, was discovered in Z…
• CVE-2019-6251WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnera…