CVE-2019-1010190: mgetty prior to 1.2.1 is affected by: out-of-bounds read.

Security readout for executives and security teams

CVE-2019-1010190 affects mgetty before version 1.2.1. A specially crafted local file can trigger an out-of-bounds read in the PBM-to-G3 conversion code, potentially crashing the program. The documented impact is denial of service, not data theft or remote takeover. Exposure is most likely on systems running mgetty prior to 1.2.1, especially where local users or automated workflows process untrusted PBM/G3-related files. No remote network exposure is identified in the supplied sources. Handle through routine patch management unless mgetty processes untrusted files in production workflows. Business risk appears limited to service interruption based on the supplied evidence. Mitigation focus: Upgrade mgetty to version 1.2.1 or later.; Apply relevant distribution security updates, including openSUSE-SU-2020:0506 where applicable.; Restrict processing of untrusted files through mgetty conversion utilities..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.