CVE-2019-17264

Name of the Vulnerable Software and Affected Versions libyal liblnk versions prior to 20191006

Description The issue is related to a heap-based buffer over-read in the liblnk location information read data function, located in liblnk location information.c, due to the use of an incorrect variable name for a certain offset. The vendor has disputed this issue, as described in the GitHub issue.

Recommendations For versions prior to 20191006, update to a version released after 20191006 to resolve the issue. At the moment, there is no information about additional mitigation measures for this issue.