CVE-2019-17264

In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue

Score
CVSS 3.1 3.3 Low
Status
Modified - cve@mitre.org
Published
2019-10-06
Last modified
2024-08-05
Weaknesses
CWE-125, CWE-682

Affected products

References

 
 
© AVABIS GmbH privacypolicy about