Bugzilla – Bug 1129596
VUL-1: CVE-2019-9656: libofx: null pointer dereference in function OFXApplication:startElement in lib/ofx_sgml.cpp
Last modified: 2020-06-29 06:38:34 UTC
An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.
assuming both codestreams as affected: