CVE-2019-5436
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVSS
7.8
High
EPSS
49.7%
p99
KEV
—
Exploit Today
30
0-100
Published: May 28, 2019 · Last modified: Oct 14, 2026 · CWE-122 · CWE-787
49.7%EPSS · 30 days49.7%
2026-09-232026-10-20
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/09/11/6
- curl.haxx.sehttps://curl.haxx.se/docs/CVE-2019-5436.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
- seclists.orghttps://seclists.org/bugtraq/2020/Feb/36
- security.gentoo.orghttps://security.gentoo.org/glsa/202003-29
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20190606-0004/
- support.f5.comhttps://support.f5.com/csp/article/K55133295
- support.f5.comhttps://support.f5.com/csp/article/K55133295?utm_source=f5support&%3Butm_medium=RSS
- www.debian.orghttps://www.debian.org/security/2020/dsa-4633
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2019/09/11/6
- curl.haxx.sehttps://curl.haxx.se/docs/CVE-2019-5436.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
- seclists.orghttps://seclists.org/bugtraq/2020/Feb/36
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-114112——
——0Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif decoding flaws to execute code.1dCVE-2026-1140458.8 HIG—
——0FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DVI_ADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDC_FORMATS PDUs with an nBlockAlign too small for nChannels, causing an unbounded heap write during server audio playback, potentially enabling code execution.1dCVE-2021-480206.5 MED—
——0Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or raw_log topics can have memory corrupted, producing incorrect contract behavior.1dCVE-2021-480187.4 HIG—
——0Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the contract's intended logic.1dCVE-2020-372866.5 MED—
——0Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested calls. Contracts using such calls as tuple elements, call arguments, or builtin arguments like concat or ecrecover can return corrupted values or pass wrong arguments to external calls.1dCVE-2026-1133009.6 CRI—
——0Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)1d