ALPINE-CVE-2019-8904 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2019-8904 PUBLISHED CVSS 8.800000190734863 HIGH

do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.

Risk Scores

CVSS v3.0

8.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.20	file	5.35-r0, 0, 4.26-r1
Alpine:v3.11	file	0, 4.26-r1, 5.00-r0
Alpine:v3.17	file	0, 5.35-r0, 5.33-r0
Alpine:v3.13	file	0, 4.26-r1, 5.00-r0
Alpine:v3.23	file	0, 5.35-r0, 5.33-r0
Alpine:v3.10	file	4.26-r1, 0, 5.35-r0
Alpine:v3.21	file	5.35-r0, 0, 4.26-r1
Alpine:v3.18	file	5.35-r0, 0, 4.26-r1
Alpine:v3.14	file	4.26-r1, 5.00-r0, 5.01-r0
Alpine:v3.15	file	5.16-r0, 5.33-r0, 5.32-r0
Alpine:v3.12	file	5.31-r1, 5.31-r0, 5.30-r0
Alpine:v3.9	file	5.35-r0, 0, 4.26-r1
Alpine:v3.22	file	5.35-r0, 0, 4.26-r1
Alpine:v3.16	file	0, 4.26-r1, 5.00-r0
Alpine:v3.19	file	0, 5.35-r0, 5.33-r0

Timeline

Feb 18, 2019 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2019-8904 advisory

Open in Interactive Console →