High severity7.5NVD Advisory· Published Mar 27, 2019· Updated Jun 17, 2026

CVE-2019-3817

Description

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rpm Software Management/libcompsllm-create
Range: <0.1.10
osv-coords
pkg:rpm/suse/libcomps&distro=SUSE%20Package%20Hub%2015
Range: < 0.1.8-bp150.3.3.1
libcomps/libcompsv5
Range: 0.1.10

Patches

Vulnerability mechanics

References

github.com/rpm-software-management/libcomps/commit/e3a5d056633677959ad924a51758876d415e7046nvdPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingVendor Advisory
github.com/rpm-software-management/libcomps/issues/41nvdExploitIssue TrackingThird Party Advisory
access.redhat.com/errata/RHSA-2019:3583nvd
access.redhat.com/errata/RHSA-2019:3898nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000