Approved changes feed: RSS · Atom

cpe:2.3:a:leadtools:leadtools:20.0.2019.3.15:*:*:*:*:*:*:*

part: a version: 20.0.2019.3.15 update: *

VendorLeadtools (a1795064-1bdf-5628-bd50-791baa04ccf3)
ProductLeadtools (6f49eaa1-caff-5558-a2cc-3e594c3ecdf7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5154 vulnerable 2026-06-08 05:13:57.770663 Details available
HIGH (8.8)
An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this vulnerability.
Published: 2019-12-11T23:47:20.000Z
Updated: 2024-08-04T19:47:56.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5100 vulnerable 2026-06-08 05:13:57.697083 Details available
HIGH (8.8)
An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can cause an integer overflow, potentially resulting in code execution. An attacker can specially craft a BMP image to trigger this vulnerability.
Published: 2019-11-06T19:35:57.000Z
Updated: 2024-08-04T19:47:56.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5099 vulnerable 2026-06-08 05:13:57.696739 Details available
HIGH (8.8)
An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially craft a CMP image to trigger this vulnerability.
Published: 2019-11-06T19:34:34.000Z
Updated: 2024-08-04T19:47:55.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5093 vulnerable 2026-06-08 05:13:57.674975 Details available
HIGH (8.1)
An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially crafted packet can cause an integer overflow, resulting in heap corruption. An attacker can send a packet to trigger this vulnerability.
Published: 2019-12-11T23:40:13.000Z
Updated: 2024-08-04T19:47:55.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5092 vulnerable 2026-06-08 05:13:57.674548 Details available
HIGH (8.8)
An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a DICOM image to trigger this vulnerability.
Published: 2019-12-11T23:47:33.000Z
Updated: 2024-08-04T19:47:55.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5091 vulnerable 2026-06-08 05:13:57.674129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5090 vulnerable 2026-06-08 05:13:57.673789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5085 vulnerable 2026-06-08 05:13:57.666399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5084 vulnerable 2026-06-08 05:13:57.665160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.