By setting small buffer in TRANSACT2_QFILEPATHINFO it's possible to cause dynamic memory buffer overflow on oversized path.
vulners.com/securityvulns/securityvulns:doc:7188
vulners.com/securityvulns/securityvulns:doc:7193