Is CVE-2019-7148 actively exploited?

No active exploitation of CVE-2019-7148 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-7148 be exploited remotely?

Yes. CVE-2019-7148 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2019-7148?

CVE-2019-7148 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2019-7148

MEDIUM

CVE-2019-7148

CWE-770Published: January 29, 2019· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers believe this is not a real issue, but instead a "warning caused by ASAN because the allocation is big. By setting ASAN_OPTIONS=allocator_may_return_null=1 and running the reproducer, nothing happens."

NVD Source

Technical Analysis

CVE-2019-7148 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.