Skip to content

BaselineWatch

Desk

CVE-2019-8906

4.4 medium SSVC exploitation: none Modified

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

Fix

Patch, vendor advisory and mitigation references on NVD 2

https://github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f Patch, Third Party Advisory
https://github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f Patch, Third Party Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

2026-10-15 00:45First seenCVSS 4.4 · file_project, canonical, opensuseNVD modified 2026-10-08 21:17

Affected (CPE criteria) 10

cpe:2.3:a:file_project:file:5.35:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

References 18

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html Mailing List, Third Party Advisory
https://bugs.astron.com/view.php?id=64 Exploit, Issue Tracking, Third Party Advisory
https://github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f Patch, Third Party Advisory
https://support.apple.com/kb/HT209599 Third Party Advisory
https://support.apple.com/kb/HT209600 Third Party Advisory
https://support.apple.com/kb/HT209601 Third Party Advisory
https://support.apple.com/kb/HT209602 Third Party Advisory
https://usn.ubuntu.com/3911-1/ Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00027.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00053.html Mailing List, Third Party Advisory
https://bugs.astron.com/view.php?id=64 Exploit, Issue Tracking, Third Party Advisory
https://github.com/file/file/commit/2858eaf99f6cc5aae129bcbf1e24ad160240185f Patch, Third Party Advisory
https://support.apple.com/kb/HT209599 Third Party Advisory
https://support.apple.com/kb/HT209600 Third Party Advisory
https://support.apple.com/kb/HT209601 Third Party Advisory
https://support.apple.com/kb/HT209602 Third Party Advisory
https://usn.ubuntu.com/3911-1/ Third Party Advisory