Home Embedded Vulns General Vulns

CVE-2019-20395

MEDIUM 6.5

Our Analysis: Environment Specific

Our model has classified this vulnerability as relevant to Environment Specific Systems, helping your team prioritize efforts effectively.

Published Date January 22, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

Potentially Affected Vendors