First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2020-19716

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Exiv2/exiv2/issues/980Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00013.htmlMailing List, Third Party Advisory
https://github.com/Exiv2/exiv2/issues/980Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00013.htmlMailing List, Third Party Advisory

Timeline

Published: Jul 13, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-197176.5An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of CVE-2020-197186.5An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of serv CVE-2020-197196.5A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).CVE-2020-197206.5An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of CVE-2020-197216.5A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading CVE-2020-197226.5An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a CVE-2020-197245.5A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via cra CVE-2020-197257.8There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the con CVE-2020-197268.8An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory o CVE-2020-19758.8Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject CVE-2020-197507.5An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.CVE-2020-197519.1An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.