CVE-2020-23909

EUVD-2020-16646
Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
Affected Products (NVD)
VendorProductVersion
advancemameadvancemame
𝑥
≤ 2.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
advancecomp
bionic
deferred
focal
deferred
jammy
deferred
kinetic
ignored
lunar
ignored
mantic
ignored
noble
deferred
trusty
ignored
xenial
deferred
cloop
bionic
deferred
focal
deferred
jammy
deferred
kinetic
ignored
lunar
ignored
mantic
ignored
noble
deferred
trusty
ignored
xenial
deferred
Common Weakness Enumeration
References
https://sourceforge.net/p/advancemame/bugs/285/
https://sourceforge.net/p/advancemame/bugs/285/