CVE-2019-17264

In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue

In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue

** EN DISPUTA ** En libyal liblnk versiones anteriores a 20191006, la función liblnk_location_information_read_data en el archivo liblnk_location_information.c presenta una lectura excesiva de búfer en la región heap de la memoria porque es usado un nombre de variable incorrecto para un cierto desplazamiento. NOTA: el fabricante ha disputado esto, tal y como se describe en los comentarios de problemas de GitHub.