CVE-2019-8379

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.

• CWE-476

• https://access.redhat.com/errata/RHSA-2019:2332Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00034.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J23C6QSTJMQ467KAI6QG54AE4MZRLPQV/
• https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-the-function-be_uint32_read-advancecomp/Exploit, Third Party Advisory
• https://sourceforge.net/p/advancemame/bugs/271/Exploit, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:2332Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00034.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J23C6QSTJMQ467KAI6QG54AE4MZRLPQV/
• https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-the-function-be_uint32_read-advancecomp/Exploit, Third Party Advisory
• https://sourceforge.net/p/advancemame/bugs/271/Exploit, Third Party Advisory

Published

Feb 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8371OpenEMR v5.0.1-6 allows code execution.7.2
• CVE-2019-8372The LHA.sys driver before 1.1.1811.2101 in LG Device Manager…
• CVE-2019-8375The UIProcess subsystem in WebKit, as used in WebKitGTK thro…
• CVE-2019-8376An issue was discovered in Tcpreplay 4.3.1. A NULL pointer d…7.8
• CVE-2019-8377An issue was discovered in Tcpreplay 4.3.1. A NULL pointer d…7.8
• CVE-2019-8378An issue was discovered in Bento4 1.5.1-628. A heap-based bu…
• CVE-2019-8380An issue was discovered in Bento4 1.5.1-628. A NULL pointer …
• CVE-2019-8381An issue was discovered in Tcpreplay 4.3.1. An invalid memor…7.8
• CVE-2019-8382An issue was discovered in Bento4 1.5.1-628. A NULL pointer …
• CVE-2019-8383An issue was discovered in AdvanceCOMP through 2.1. An inval…7.8
• CVE-2019-8385An issue was discovered in Thomson Reuters Desktop Extension…
• CVE-2019-8387MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Ex…