CVE-2019-14378

CVE-2019-14378 is a heap-based buffer overflow vulnerability in libslirp 4.0.0, specifically within the ip_reass function in ip_input.c, due to improper handling of the first fragment of a large packet. This flaw carries a CVSS score of 8.8 (High), indicating a critical risk with network-based exploitation, low privileges required, and potential for high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, a Denial of Service exploit for QEMU exists on ExploitDB, and the vulnerability has garnered some community discussion and media coverage.