VDB

ALPINE-CVE-2019-16707

ALPINE-CVE-2019-16707 PUBLISHED CVSS 6.5 MEDIUM

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.24hunspell0, 0
Alpine:v3.11hunspell1.6.2-r1, 1.6.2-r0, 1.6.1-r0
Alpine:v3.21hunspell1.6.2-r0, 0, 1.2.10-r0
Alpine:v3.20hunspell1.6.2-r2, 0, 0
Alpine:v3.12hunspell1.3.2-r0, 0, 0
Alpine:v3.17hunspell1.2.10-r0, 1.2.11-r1, 1.2.11-r3
Alpine:v3.19hunspell1.3.4-r0, 1.2.11-r1, 1.2.11-r0
Alpine:v3.23hunspell1.2.11-r0, 1.2.14-r0, 1.2.15-r0
Alpine:v3.14hunspell1.2.14-r0, 0, 1.2.10-r0
Alpine:v3.15hunspell1.2.11-r3, 1.2.11-r1, 1.2.11-r0
Alpine:v3.22hunspell1.3.3-r0, 1.2.11-r1, 1.2.12-r0
Alpine:v3.10hunspell1.2.10-r0, 1.2.11-r1, 1.2.12-r0
Alpine:v3.16hunspell1.2.8-r1, 0, 0
Alpine:v3.9hunspell1.6.0-r0, 0, 1.2.10-r0
Alpine:v3.8hunspell1.2.11-r1, 1.2.10-r0, 1.2.11-r0
Alpine:v3.13hunspell1.2.11-r3, 1.6.2-r0, 0
Alpine:v3.18hunspell1.2.10-r0, 0, 1.6.2-r0

Timeline

  • Sep 23, 2019 CVE Published
  • Apr 30, 2026 Distribution Patch
  • Jun 9, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›