High severity8.8OSV Advisory· Published Feb 18, 2019· Updated Jun 17, 2026
CVE-2019-8904
CVE-2019-8904
Description
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:a:file_project:file:5.35:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- bugs.astron.com/view.phpnvdExploitIssue TrackingThird Party Advisory
- www.securityfocus.com/bid/107130nvdThird Party AdvisoryVDB Entry
- usn.ubuntu.com/3911-1/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.