{"id":"CVE-2019-6247","details":"An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.","modified":"2026-07-08T05:55:37.289802019Z","published":"2019-01-13T00:29:00.570Z","database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"antigrain:agg","cpes":["cpe:2.3:a:antigrain:agg:2.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.4"},{"last_affected":"2.4"}]}]},"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html"},{"type":"FIX","url":"https://github.com/svgpp/svgpp/issues/70"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/svgpp/svgpp","events":[{"introduced":"17e54ff509ae8d9433b9e6d09b9855aac64ded99"},{"last_affected":"17e54ff509ae8d9433b9e6d09b9855aac64ded99"}],"database_specific":{"extracted_events":[{"introduced":"1.2.3"},{"last_affected":"1.2.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:svgpp:svgpp:1.2.3:*:*:*:*:*:*:*"}}],"versions":["1.2.3","v1.2.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6247.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}