CVE-2019-17401

PoC —

CVSS 3.1

3.3 low

EPSS

<1%p33

Published

Oct 9, 2019 (Oct 9, 2019)

Modified

Jun 17, 2026

Description

libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_location_information_read_data in liblnk_location_information.c, a different issue than CVE-2019-17264. NOTE: the vendor has disputed this as described in the GitHub issue

Vendors: liblnk project
Products: liblnk
Weakness: CWE-125
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.