Lucene search

K
osvGoogleOSV:CVE-2019-20394
HistoryJan 22, 2020 - 10:15 p.m.

CVE-2019-20394

2020-01-2222:15:10
Google
osv.dev
2

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%