Low severity3.3NVD Advisory· Published Oct 6, 2019· Updated Jun 17, 2026

CVE-2019-17264

Description

In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Liblnk Project/Liblnk
cpe:2.3:a:liblnk_project:liblnk:*:*:*:*:*:*:*:*
Range: <20191006
libyal/liblnkdescription
Libyal/Liblnkllm-fuzzy
Range: <20191006

Patches

Vulnerability mechanics

References

github.com/libyal/liblnk/compare/20181227...20191006nvdPatchThird Party Advisory
github.com/libyal/liblnk/issues/38nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000