Security Advisory

CVE-2019-20391

6.5
MEDIUM

Vulnerability Description

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash.
Published Date January 22, 2020
Official Source NIST NVD Advisory