ZeroDay Findings
Sign inSign up

Findings

CVE-2019-18224

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

Published Oct 21, 2019 · updated Oct 14, 2026 · gnu libidn2

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 21, 2019 · NIST NVD

    Detected

    idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

  2. Oct 14, 2026 · NIST NVD

    Updated

    idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

Affected

  • cpe gnu/libidn2version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2019-18224

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-18224

    30-day exploitation probability 3.7%

    first.org
  • NIST NVDVulnerability recordCVE-2019-18224

    idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

    nvd.nist.gov

References