CVE-2019-12290

CVE-2019-12290 describes a vulnerability in GNU libidn2 versions prior to 2.2.0, where the software fails to properly perform roundtrip checks during A-label to U-label conversions, allowing for domain impersonation. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and can lead to significant integrity impacts, as malicious domains can be crafted to mimic legitimate ones. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for impersonation makes this a notable concern for systems utilizing affected libidn2 versions.