CVE-2019-17401

CVE-2019-17401 describes a heap-based buffer over-read vulnerability in libyal's liblnk library (version 20191006), specifically within the liblnk_location_information_read_data function. This issue, distinct from CVE-2019-17264, affects liblnk_project and liblnk. With a CVSS score of 3.3 (LOW), it requires local access and low privileges, has low attack complexity, and primarily impacts availability, though the vendor disputes its validity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.