The vulnerability of component RFC3490 of the Libidn2 library allows a attacker to create a malicious domain that corresponds to the target domain.

The vulnerability of component RFC3490 of the Libidn2 library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to create a malicious domain that corresponds to the target domain...

UBUNTU-CVE-2019-18224

idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...