CVE-2019-16214

CVE-2019-16214 affects Libra Core before 2019-09-03, stemming from an erroneous regular expression for inline comments that allows attackers to obscure security-critical code. An attacker could craft Move module code where a nonstandard line-break character (\r) within a comment makes subsequent code appear executable to a human auditor, while the compiler ignores it. This medium-severity vulnerability (CVSS 5.7) has a network attack vector, low attack complexity, requires user interaction, and could lead to high integrity impacts by misleading code reviewers. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.