MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

...

ALPINE-CVE-2019-14274

MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...