CVE-2019-17263

CVE-2019-17263 describes a heap-based buffer over-read vulnerability in libyal libfwsi versions prior to 20191006, specifically within the libfwsi_extension_block_copy_from_byte_stream function. This low-severity vulnerability (CVSS 3.3) could lead to a denial of service, affecting the libfwsi_project and libfwsi products. The attack requires local access and has low complexity, with no impact on confidentiality or integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion, and the vendor has disputed the vulnerability.