CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-09-09

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Cflow (Gnu)

References

• https://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.html