{"id":"UBUNTU-CVE-2019-19720","details":"Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file.","modified":"2026-05-20T16:03:49.697667836Z","published":"2019-12-11T04:15:00Z","upstream":["CVE-2019-19720"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-19720"},{"type":"REPORT","url":"https://github.com/marcIhm/yabasic/issues/36"},{"type":"REPORT","url":"http://www.yabasic.de/whatsnew.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2019-19720"}],"affected":[{"package":{"name":"yabasic","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.78.2-2","1:2.78.3-1","1:2.78.5-1"],"ecosystem_specific":{"binaries":[{"binary_name":"yabasic","binary_version":"1:2.78.5-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}},{"package":{"name":"yabasic","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.84.2-1","1:2.84.3-1","1:2.85.0-1","1:2.86.0-1","1:2.86.4-1","1:2.86.4-1build1","1:2.86.6-1"],"ecosystem_specific":{"binaries":[{"binary_version":"1:2.86.6-1","binary_name":"yabasic"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}},{"package":{"name":"yabasic","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.90.1-1","1:2.90.2-1"],"ecosystem_specific":{"binaries":[{"binary_version":"1:2.90.2-1","binary_name":"yabasic"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}},{"package":{"name":"yabasic","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.90.3-1"],"ecosystem_specific":{"binaries":[{"binary_version":"1:2.90.3-1","binary_name":"yabasic"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}},{"package":{"name":"yabasic","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.91.1-1","1:2.91.3-1","1:2.91.4-1"],"ecosystem_specific":{"binaries":[{"binary_name":"yabasic","binary_version":"1:2.91.4-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}},{"package":{"name":"yabasic","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/yabasic?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.91.4-1","1:2.91.4-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"yabasic","binary_version":"1:2.91.4-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-19720.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}