Advancemame Advancecomp — known CVE vulnerabilities

Every CVE whose affected-product data names Advancemame Advancecomp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2018-1056 — CVSS 7.8 (high): An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker…
• CVE-2019-8379 — CVSS 7.8 (high): An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in…
• CVE-2019-8383 — CVSS 7.8 (high): An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It…
• CVE-2019-9210 — CVSS 7.8 (high): In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an…
• CVE-2022-35014 — CVSS 5.5 (medium): Advancecomp v2.3 contains a segmentation fault.
• CVE-2022-35015 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
• CVE-2022-35016 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a heap buffer overflow.
• CVE-2022-35017 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a heap buffer overflow.
• CVE-2022-35018 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a segmentation fault.
• CVE-2022-35019 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a segmentation fault.
• CVE-2022-35020 — CVSS 5.5 (medium): Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_comm…
• CVE-2023-2961 — CVSS 3.3 (low): A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.