CVE-2019-6247

An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.

• CWE-787

• https://github.com/svgpp/svgpp/issues/70Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html
• https://github.com/svgpp/svgpp/issues/70Exploit, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html

Published

Jan 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6241In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet c…
• CVE-2019-6242Kentico v10.0.42 allows Global Administrators to read the cl…
• CVE-2019-6243Frog CMS 0.9.5 allows XSS via the forgot password page (aka …
• CVE-2019-6244An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlb…
• CVE-2019-6245An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as …8.8
• CVE-2019-6246An issue was discovered in SVG++ (aka svgpp) 1.2.3. After ca…
• CVE-2019-6248PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Sc…
• CVE-2019-6249An issue was discovered in HuCart v5.7.4. There is a CSRF vu…
• CVE-2019-6250A pointer overflow, with code execution, was discovered in Z…
• CVE-2019-6251WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnera…
• CVE-2019-6256A Denial of Service issue was discovered in the LIVE555 Stre…
• CVE-2019-6257A Server Side Request Forgery (SSRF) vulnerability in elFind…7.7