attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack
Details
CVE-2019-11759 affects multiple packages. An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. See references for individual vulnerability details.