{"id":"CVE-2019-9904","details":"An issue was discovered in lib\\cdt\\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\\cgraph\\graph.c in libcgraph.a, related to agfstsubg in lib\\cgraph\\subg.c.","modified":"2026-07-08T20:03:39.190477Z","published":"2019-03-21T18:29:00.723Z","references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202107-04"},{"type":"REPORT","url":"https://gitlab.com/graphviz/graphviz/issues/1512"},{"type":"EVIDENCE","url":"https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/graphviz/graphviz","events":[{"introduced":"67cd2e5121379a38e0801cc05cce5033f8a2a609"},{"last_affected":"67cd2e5121379a38e0801cc05cce5033f8a2a609"}],"database_specific":{"extracted_events":[{"introduced":"2.40.1"},{"last_affected":"2.40.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:graphviz:graphviz:2.40.1:*:*:*:*:*:*:*"}}],"versions":["2.40.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9904.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}