← All advisories

Medium severity6.5NVD Advisory· Published Sep 9, 2019· Updated Jun 17, 2026

CVE-2019-16166

CVE-2019-16166

Description

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

GNU/cflowdescription
GNU/cflow2 versions
cpe:2.3:a:gnu:cflow:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:cflow:*:*:*:*:*:*:*:*range: <=1.6
- (no CPE)range: <=1.6
osv-coords
pkg:rpm/opensuse/cflow&distro=openSUSE%20Tumbleweed
Range: < 1.7-1.1

Patches

Vulnerability mechanics

References

1

lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.htmlnvdMailing ListVendor Advisory

News mentions

0

No linked articles in our index yet.