CVE-2019-14528

Name of the Vulnerable Software and Affected Versions GnuCOBOL version 2.2

Description The issue is a heap-based buffer overflow in the read literal function, located in cobc/scanner.l, which can be triggered by crafted COBOL source code.

Recommendations For GnuCOBOL version 2.2, consider applying a patch or fix that addresses the heap-based buffer overflow in the read literal function to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.