CVE-2019-9904

PoC ×2—

CVSS 3.1

6.5 medium

EPSS

3%p85

Published

Mar 21, 2019 (Mar 21, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.

Vendors: graphviz
Products: graphviz
Weakness: CWE-674
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.