CVE-2019-16165

GNU cflow through 1.6 has a use-after-free in the reference function in parser.c...

CVE-2019-16165

GNU cflow through 1.6 has a use-after-free in the reference function in parser.c...

CVE-2019-16165

GNU cflow up to version 1.6 is affected by a use-after-free in the reference function of parser.c, per CVE-2019-16165. Exploitation could lead to denial of service or arbitrary code execution, as described across multiple sources. The issue is tied to memory management in the parser and is presen...

CVE-2019-16165

GNU cflow through 1.6 has a use-after-free in the reference function in parser.c...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

CVE-2019-16166

GNU cflow versions up to 1.6 are affected by a heap-based buffer over-read in the nexttoken function of parser.c (CVE-2019-16166). The issue is documented across multiple sources (NVD, OSV, SUSE, Debian/Ubuntu OSV entries) and consistently references the same core flaw in parser.c. Public referen...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

CVE-2019-16165: Use After Free

GNU cflow through 1.6 has a use-after-free in the reference function in parser.c...

CVE-2019-16166: Out-of-bounds Read

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

PT-2019-14548

Name of the Vulnerable Software and Affected Versions GNU cflow versions prior to 1.7 Description The issue is related to a use-after-free in the reference function in parser.c. Recommendations For GNU cflow versions prior to 1.7, update to version 1.7 or later to resolve the issue...

PT-2019-14549

Name of the Vulnerable Software and Affected Versions GNU cflow versions prior to 1.7 Description The issue is related to a heap-based buffer over-read in the nexttoken function in parser.c. Recommendations For GNU cflow versions prior to 1.7, update to version 1.7 or later to resolve the issue...