CVE-2019-17264 describes a heap-based buffer over-read vulnerability in libyal liblnk versions prior to 20191006, specifically within the liblnk_location_information_read_data function. This flaw, caused by an incorrect variable name for an offset, affects the liblnk_project and liblnk libraries. The vulnerability has a low severity CVSS score of 3.3, indicating local access and low impact on availability, with no impact on confidentiality or integrity. Despite the vendor disputing the finding, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 20191006CPE matchmatch criteria | cpe:2.3:a:liblnk_project:liblnk:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.