CVE-2019-17260

HIGH 7.8CVE-2019-17260 · Published 08/10/2019 · updated 17/06/2026

In short

CVE-2019-17260 is a HIGH (CVSS 7.8) vulnerability affecting mpc-hc (mpc-hc).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mpc-hc mpc-hc	`≤ 1.7.13`	No fix yet

MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc!memcpy+0x000000000000004e.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.