DEBIAN-CVE-2019-19221 - debian/libarchive
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: pending-human-approval - bulk import