Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19720.json"