Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-43516.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-43516
Upstream
  • CVE-2020-23909
Published
2023-07-18T14:15:11Z
Modified
2026-04-21T04:31:02.129802Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
CVE-2020-23909 affecting package advancecomp 2.5-1
Details

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1.

References

Affected packages

Azure Linux:2 / advancecomp

Package

Name
advancecomp
Purl
pkg:rpm/azure-linux/advancecomp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.5-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-43516.json"