VULNERABILITY INTELLIGENCE

CVE-2019-12806

CVSS score8.8 HIGH
EPSS probability4.13%
CISA KEVNot currently listed
Published2019-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote attacker to execute arbitrary code via crafted https packets.

Weakness classification

  • vuln@krcert.or.kr: CWE-119
  • nvd@nist.gov: CWE-787

Primary references